9.3

CVE-2009-1725: apple iphone_os Numeric Errors

CVSS: 9.3v2.0HighModified
Published 09-07-2009Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2009-1725 is a high (CVSS 9.3) Numeric Errors vulnerability in apple iphone_os. EPSS estimates a 6.19% chance of exploitation in the next 30 days, higher than 93.4% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.3/10
010
High · v2.0 (NVD)
EPSS score
6.19%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2
DSA-1950-1DSA-1988-1

Timeline

  1. 09-07-2009
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

6.19%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.19% on 20-09-2026

20-09-202620-10-2026
EPSS score
6.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Apple2 products
  • iphone_osEOL≤ 3.0.1 | 10.0 | 1.0.1 | 1.0.2 | 1.1.0 | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 2.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.1 | 2.1.1 | 2.2 | 2.2.1 | 3.0 | ≤ 3.1 | 3.0.1
  • safari≤ 4.0.1 | 2.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.3:417.8 | 2.0.3:417.9 | 2.0.3:417.9.2 | 2.0.3:417.9.3 | 2.0.4 | 3.0 | 3.0.0 | 3.0.0b | 3.0.1 | 3.0.1:beta | 3.0.1b | 3.0.2 | 3.0.2b | 3.0.3 | 3.0.3b | 3.0.4 | 3.0.4b | 3.1.0 | 3.1.0b | 3.1.1 | 3.1.2 | 3.2.0 | 3.2.1 | 3.2.2 | 4.0 | 4.0.0b
Debian1 product
  • qt4-x11< 4:4.5.2-2

2 vendors · 3 products

References

33 links
Show all 33 references