CVE-2009-2195: Buffer Overflow
Published Aug 12, 2009
·Updated
Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.
Affected Software
81 affected components
Apple iOS and macOS=10.4.
Apple iOS and macOS=10.5.7
Apple iOS and macOS=10.5.8
Apple Mac OS X Server=10.4.11
Apple Mac OS X Server=10.5.7
Apple Mac OS X Server=10.5.8
Microsoft Windows Vista
Microsoft Windows XP
Apple Safari<=4.0.2
Apple Safari=0.8
Apple Safari=0.9
Apple Safari=1.0
Apple Safari=1.0-beta
Apple Safari=1.0-beta2
Apple Safari=1.0.0
Apple Safari=1.0.0b1
Apple Safari=1.0.0b2
Apple Safari=1.0.1
Apple Safari=1.0.2
Apple Safari=1.0.3
Apple Safari=1.0.3-85.8
Apple Safari=1.0.3-85.8.1
Apple Safari=1.1
Apple Safari=1.1.0
Apple Safari=1.1.1
Apple Safari=1.2
Apple Safari=1.2.0
Apple Safari=1.2.1
Apple Safari=1.2.2
Apple Safari=1.2.3
Apple Safari=1.2.4
Apple Safari=1.2.5
Apple Safari=1.3
Apple Safari=1.3.0
Apple Safari=1.3.1
Apple Safari=1.3.2
Apple Safari=1.3.2-312.5
Apple Safari=1.3.2-312.6
Apple Safari=2.0
Apple Safari=2.0.0
Apple Safari=2.0.1
Apple Safari=2.0.2
Apple Safari=2.0.3
Apple Safari=2.0.3-417.8
Apple Safari=2.0.3-417.9
Apple Safari=2.0.3-417.9.2
Apple Safari=2.0.3-417.9.3
Apple Safari=2.0.3_417.9.3
Apple Safari=2.0.4
Apple Safari=2.0.4_419.3
Apple Safari=2.0_pre
Apple Safari=3
Apple Safari=3.0
Apple Safari=3.0.0
Apple Safari=3.0.0b
Apple Safari=3.0.1
Apple Safari=3.0.1-beta
Apple Safari=3.0.1b
Apple Safari=3.0.2
Apple Safari=3.0.2b
Apple Safari=3.0.3
Apple Safari=3.0.3-522.15.5
Apple Safari=3.0.3b
Apple Safari=3.0.4
Apple Safari=3.0.4_beta
Apple Safari=3.0.4b
Apple Safari=3.1
Apple Safari=3.1.0
Apple Safari=3.1.0b
Apple Safari=3.1.1
Apple Safari=3.1.2
Apple Safari=3.2
Apple Safari=3.2.0
Apple Safari=3.2.1
Apple Safari=3.2.2
Apple Safari=4.0
Apple Safari=4.0-beta
Apple Safari=4.0.1
Apple Safari=4.0_beta-528.16
Apple Safari=4beta
Apple Safari=beta2
Remediation
Patch Available
Patch Available
Event History
Aug 12, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-2195?
CVE-2009-2195 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2009-2195?
To fix CVE-2009-2195, update Apple Safari to version 4.0.3 or later.
3
Which versions of Safari are affected by CVE-2009-2195?
CVE-2009-2195 affects Apple Safari versions up to and including 4.0.2.
4
What types of attacks can be executed using CVE-2009-2195?
CVE-2009-2195 can be exploited to execute arbitrary code or cause a denial of service via crafted floating-point numbers.
5
Is there a workaround for CVE-2009-2195 if I cannot update Safari?
There is no official workaround for CVE-2009-2195; updating Safari is the recommended action to mitigate this vulnerability.