CVE-2009-0945: Code Injection
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0945?
CVE-2009-0945 has a severity rating that indicates a potential for remote code execution vulnerabilities.
How do I fix CVE-2009-0945?
To fix CVE-2009-0945, users should update to the latest version of Safari or other affected software that addresses this vulnerability.
Which software versions are affected by CVE-2009-0945?
CVE-2009-0945 affects Apple Safari versions prior to 3.2.3 and several older versions of Mac OS X and iPhone OS.
Can CVE-2009-0945 be exploited remotely?
Yes, CVE-2009-0945 can be exploited remotely, allowing attackers to execute arbitrary code on the affected systems.
Is CVE-2009-0945 specific to Apple products?
While CVE-2009-0945 primarily affects Apple products, it may also impact Google Chrome Stable versions before 1.0.154.65.