CVE-2009-1690: Use After Free
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1690?
CVE-2009-1690 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2009-1690?
To mitigate CVE-2009-1690, update to the latest versions of affected software, such as Apple Safari and Google Chrome.
Which software is affected by CVE-2009-1690?
CVE-2009-1690 affects multiple versions of Apple Safari and Google Chrome, specifically versions prior to 4.0 and 1.0.154.53, respectively.
Can CVE-2009-1690 cause a denial of service?
Yes, CVE-2009-1690 can lead to denial of service through memory corruption, resulting in application crashes.
Is CVE-2009-1690 still a risk today?
While CVE-2009-1690 is an older vulnerability, it can still pose risks if outdated software is in use.