CVE-2009-1698: apple iphone_os Code Injection

CVSS: 9.3v2.0HighModified

AliasesRHSA-2009:1128

Published 10-06-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-1698 is a high (CVSS 9.3) Code Injection vulnerability in apple iphone_os. EPSS estimates a 8.46% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

8.46%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 5

DSA-1867-1 DSA-1868-1 DSA-1950-1 DSA-1988-1 RHSA-2009:1127

Timeline

10-06-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

8.46%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.46% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.46%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Redhat3 products

kdelibs< 6:3.1.3-6.13
kdelibs-debuginfo< 6:3.1.3-6.13
kdelibs-devel< 6:3.1.3-6.13

Apple2 products

iphone_osEOL10.0 | 1.0.1 | 1.0.2 | 1.1.0 | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 2.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.1 | 2.1.1 | 2.2 | 2.2.1
safari≤ 3.2.2 | 2.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.3:417.8 | 2.0.3:417.9 | 2.0.3:417.9.2 | 2.0.3:417.9.3 | 2.0.4 | 3.0 | 3.0.0 | 3.0.0b | 3.0.1 | 3.0.1:beta | 3.0.1b | 3.0.2 | 3.0.2b | 3.0.3 | 3.0.3b | 3.0.4 | 3.0.4b | 3.1.0 | 3.1.0b | 3.1.1 | 3.1.2 | 3.2.0 | 3.2.1

Debian1 product

kde4libs< 4:4.3.0-1

3 vendors · 6 products

References

41 links

www.ubuntu.com/usn/USN-822-1Vendor AdvisoryX Refsource UBUNTUAdvisory
support.apple.com/kb/HT3639X Refsource CONFIRMWEB
secunia.com/advisories/43068Third Party AdvisoryX Refsource SECUNIAAdvisory
www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.htmlVendor AdvisoryX Refsource FEDORAWEB
www.mandriva.com/security/advisories?name=MDVSA-2009:330Vendor AdvisoryX Refsource MANDRIVAAdvisory
www.vupen.com/english/advisories/2009/1621VDB EntryX Refsource VUPENAdvisory
www.vupen.com/english/advisories/2011/0212VDB EntryX Refsource VUPENAdvisory
lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlVendor AdvisoryX Refsource APPLEPatchFIX
secunia.com/advisories/35588Third Party AdvisoryX Refsource SECUNIAAdvisory
www.securityfocus.com/bid/35260VDB EntryX Refsource BIDExploitEVIDENCE

Show all 41 references

www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.htmlVendor AdvisoryX Refsource FEDORAWEB
www.vupen.com/english/advisories/2009/1522VDB EntryX Refsource VUPENPatchVendor AdvisoryFIX
secunia.com/advisories/37746Third Party AdvisoryX Refsource SECUNIAAdvisory
www.zerodayinitiative.com/advisories/ZDI-09-032/X Refsource MISCPatchFIX
securitytracker.com/id?1022345VDB EntryX Refsource SECTRACKPatchFIX
secunia.com/advisories/36790Third Party AdvisoryX Refsource SECUNIAAdvisory
lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlVendor AdvisoryX Refsource APPLEWEB
www.securityfocus.com/archive/1/504173/100/0/threadedMailing ListX Refsource BUGTRAQWEB
www.securityfocus.com/archive/1/504295/100/0/threadedMailing ListX Refsource BUGTRAQWEB
www.debian.org/security/2009/dsa-1950Vendor AdvisoryX Refsource DEBIANAdvisory
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlVendor AdvisoryX Refsource SUSEWEB
www.redhat.com/support/errata/RHSA-2009-1128.htmlVendor AdvisoryX Refsource REDHATWEB
secunia.com/advisories/35379Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryAdvisory
osvdb.org/55006VDB EntryX Refsource OSVDBWEB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9484VDB EntrySignatureX Refsource OVALWEB
secunia.com/advisories/36062Third Party AdvisoryX Refsource SECUNIAAdvisory
www.ubuntu.com/usn/USN-857-1Vendor AdvisoryX Refsource UBUNTUAdvisory
secunia.com/advisories/36057Third Party AdvisoryX Refsource SECUNIAAdvisory
www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.htmlVendor AdvisoryX Refsource FEDORAWEB
support.apple.com/kb/HT3613X Refsource CONFIRMPatchVendor AdvisoryFIX
www.ubuntu.com/usn/USN-836-1Vendor AdvisoryX Refsource UBUNTUAdvisory
www.securityfocus.com/bid/35318VDB EntryX Refsource BIDWEB
blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.htmlX Refsource MISCAdvisory
www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.htmlVendor AdvisoryX Refsource FEDORAWEB
access.redhat.com/errata/RHSA-2009:1128Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=506469REPORT
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1128.jsonAdvisory
access.redhat.com/security/cve/CVE-2009-1698REPORT
www.cve.org/CVERecord?id=CVE-2009-1698Advisory
nvd.nist.gov/vuln/detail/CVE-2009-1698Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities