CVE-2009-1701: Use After Free
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1701?
CVE-2009-1701 is a critical vulnerability that can allow remote attackers to execute arbitrary code or cause denial of service.
How do I fix CVE-2009-1701?
To fix CVE-2009-1701, update to the latest version of Apple Safari or the latest iPhone OS.
What versions are affected by CVE-2009-1701?
CVE-2009-1701 affects Apple Safari versions before 4.0, and iPhone OS versions from 1.0 through 2.2.1.
Can CVE-2009-1701 affect iPod touch devices?
Yes, CVE-2009-1701 can affect iPod touch devices running iPhone OS versions 1.1 through 2.2.1.
What type of vulnerability is CVE-2009-1701?
CVE-2009-1701 is a use-after-free vulnerability in the JavaScript DOM implementation in WebKit.