Open Vulnerability and Assessment Language (OVAL)
Offical Language Release Repository Downloads News — November 5, 2009 Search
link to OVAL home page
 OVAL Repository > View Definition

View Definition

Definition Id: oval:org.mitre.oval:def:5777 Date: 2009-09-24
Title: Apple Safari WebKit Numeric Character References Remote Memory Corruption Vulnerability.
Description: WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
Version: 1 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2009-1725
Family: windows
Platform(s): Microsoft Windows XP
Microsoft Windows Vista		 Product(s): Apple Safari
Definition Synopsis:

 

OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

The OVAL Web site is hosted by The MITRE Corporation.

Copyright 2002-2009, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation.

Contact oval@mitre.org for more information.
Privacy policy
Terms of use