CVE-2009-1690 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-1690 Interim 1 3 2021-06-09T08:49:45Z current 2021-05-30T12:47:04Z 2021-06-09T08:49:45Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-1690 Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers." The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html E-Mail link for SUSE-SR:2011:002 https://lists.opensuse.org/opensuse-updates/2010-12/msg00019.html E-Mail link for openSUSE-SU-2010:1034-1 https://lists.opensuse.org/opensuse-updates/2011-01/msg00013.html E-Mail link for openSUSE-SU-2011:0024-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers." CVE-2009-1690 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C