CVE-2009-3933: Medium severity webkit vulnerability
WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3933?
CVE-2009-3933 has been classified as a denial of service vulnerability allowing attackers to cause high CPU consumption.
How do I fix CVE-2009-3933?
To fix CVE-2009-3933, users should upgrade to WebKit r50173 or newer and ensure they are using an updated version of Google Chrome.
Which versions are affected by CVE-2009-3933?
CVE-2009-3933 affects WebKit versions before r50173 and Google Chrome versions before 3.0.195.32.
Is CVE-2009-3933 still a concern for users of recent browsers?
No, CVE-2009-3933 is not a concern for users of updated browsers since the vulnerability has been patched in later versions.
What type of attack does CVE-2009-3933 involve?
CVE-2009-3933 involves a denial of service attack that can exploit JavaScript's setInterval method.