CVE-2009-1692 json
WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software,…
published 2009-06-19 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1687
- cvss
- 7.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.2%
- EPSS 4.2% chance of exploitation in 30 days, percentile 91%
- public exploits
- 0
- none known
Summary
WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.
Exploit prediction
4.24% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- exploit-db.com https://www.exploit-db.com/exploits/9160 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
References
-
exploit-db.com
/exploits/9160
exploit
-
lists.apple.com
/archives/security-announce/2009/Jun/msg00005.html
vendor-advisory
-
debian.org
/security/2009/dsa-1950
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2011-01/msg00006.html
vendor-advisory
-
support.apple.com
/kb/HT3639
vendor-advisory
-
securityfocus.com
/bid/35446
vdb-entry
- g-sec.lu /one-bug-to-rule-them-all.html
-
secunia.com
/advisories/43068
third-party-advisory
-
vupen.com
/english/advisories/2009/1621
vdb-entry
-
vupen.com
/english/advisories/2011/0212
vdb-entry
- kb.palm.com /wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121
-
securityfocus.com
/bid/35414
vdb-entry
-
securityfocus.com
/archive/1/504988/100/0/threaded
mailing-list
-
secunia.com
/advisories/37746
third-party-advisory
-
secunia.com
/advisories/36977
third-party-advisory
-
securityfocus.com
/archive/1/505006/100/0/threaded
mailing-list
-
osvdb.org
/55242
vdb-entry
-
securityfocus.com
/archive/1/504969/100/0/threaded
mailing-list
- bugs.webkit.org /show_bug.cgi?id=23319
-
securityfocus.com
/archive/1/504989/100/0/threaded
mailing-list
Sources
- CVE List CVE-2009-1692
- NVD CVE-2009-1692
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.