CVE-2009-3272

描述

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.

如何修補 CVE-2009-3272

目前尚未發布修補版本。可考慮移除受影響套件,或參考下方連結中的上游建議。

• Debian/kde4libs—未列出修補版本
• Debian/qt4-x11—未列出修補版本

CVE-2009-3272 正在被利用嗎?

中等 — EPSS 為 6.4%,可持續追蹤但非最高優先。

受影響套件(2)

• from 0
• from 0

參考連結(4)

• ADVISORYsecunia.com/advisories/43068
• ADVISORYwww.vupen.com/english/advisories/2011/0212
• WEBlists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• WEBwww.exploit-db.com/exploits/9606