Vulnerability Name:

CVE-2009-1692 (CCN-51215)

Assigned:2009-06-17
Published:2009-06-17
Updated:2022-08-09
Summary:WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:7.1 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C)
5.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2009-1692

Source: CONFIRM
Type: UNKNOWN
http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121

Source: APPLE
Type: Vendor Advisory
APPLE-SA-2009-06-17-1

Source: SUSE
Type: UNKNOWN
SUSE-SR:2011:002

Source: OSVDB
Type: UNKNOWN
55242

Source: CCN
Type: SA35449
Apple iPhone / iPod touch Multiple Vulnerabilities

Source: CCN
Type: SA36977
Palm Pre WebOS Unspecified Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
36977

Source: SECUNIA
Type: UNKNOWN
37746

Source: SECUNIA
Type: UNKNOWN
43068

Source: CCN
Type: Apple Web site
About the security content of iPhone OS 3.0 Software Update

Source: CONFIRM
Type: Vendor Advisory
http://support.apple.com/kb/HT3639

Source: DEBIAN
Type: UNKNOWN
DSA-1950

Source: DEBIAN
Type: DSA-1950
webkit -- several vulnerabilities

Source: MISC
Type: UNKNOWN
http://www.g-sec.lu/one-bug-to-rule-them-all.html

Source: CCN
Type: OSVDB ID: 55242
Apple iPhone / iPod Touch WebKit HTMLSelectElement Object Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56253
Mozilla Multiple Products Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56254
Microsoft IE Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56255
KDE Konqueror Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56256
Nokia Multiple Products Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56257
Aigo P8860 Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56258
Opera Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56259
Sony PLAYSTATION 3 (PS3) Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56260
Netscape Select Object Length Property Handling Memory Consumption DoS

Source: CCN
Type: OSVDB ID: 56324
BlackBerry 8800 Select Object Length Property Handling Memory Consumption DoS

Source: BUGTRAQ
Type: UNKNOWN
20090715 [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....

Source: BUGTRAQ
Type: UNKNOWN
20090715 Re:[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....

Source: BUGTRAQ
Type: UNKNOWN
20090715 Re: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....

Source: BUGTRAQ
Type: UNKNOWN
20090716 Re[2]: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....

Source: BID
Type: UNKNOWN
35414

Source: CCN
Type: BID-35414
RETIRED: Apple iPhone and iPod touch Prior to Version 3.0 Multiple Vulnerabilities

Source: BID
Type: UNKNOWN
35446

Source: CCN
Type: BID-35446
Multiple Vendor Browser 'HTMLSelectElement' Denial of Service Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2009-1621

Source: VUPEN
Type: UNKNOWN
ADV-2011-0212

Source: MISC
Type: UNKNOWN
https://bugs.webkit.org/show_bug.cgi?id=23319

Source: XF
Type: UNKNOWN
ipod-iphone-htmlselectelement-dos(51215)

Source: EXPLOIT-DB
Type: UNKNOWN
9160

Source: SUSE
Type: SUSE-SR:2011:002
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
  • AND
  • cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:apple:iphone_os:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*
  • AND
  • cpe:/h:apple:ipod_touch:*:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/a:apple:safari:*:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:apple:iphone_os:1.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:1.1:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:2.0.2:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/h:apple:ipod_touch:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:1.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
  • AND
  • cpe:/a:opera:opera_browser:*:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:kde:konqueror:*:*:*:*:*:*:*:*
  • OR cpe:/a:apple:safari:*:*:*:*:*:*:*:*
  • OR cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:*
  • OR cpe:/a:mozilla:thunderbird:*:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*
  • OR cpe:/a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:mozilla:seamonkey:*:*:*:*:*:*:*:*
  • OR cpe:/h:nokia:n95:*:*:*:*:*:*:*:*
  • OR cpe:/a:google:chrome:*:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:ie:8.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandriva:linux:2010:*:*:*:x86_64:*:*:*
  • OR cpe:/o:mandriva:linux:2010:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20091692
    V
    		CVE-2009-1692
    2015-11-16
    oval:org.mitre.oval:def:7247
    P
    		DSA-1950 webkit -- several vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:18395
    P
    		DSA-1950-1 webkit - several vulnerabilities
    2014-06-23
    oval:org.debian:def:1950
    V
    		several vulnerabilities
    2009-12-12
    BACK
    apple iphone os 1.0.2
    apple iphone os 2.2
    apple iphone os 1.1.1
    apple iphone os 2.0.0
    apple iphone os 1.1.2
    apple iphone os 1.1.3
    apple iphone os 1.1.0
    apple iphone os 1.0.1
    apple iphone os 2.1
    apple iphone os 2.2.1
    apple iphone os 2.0
    apple iphone os 1.1.5
    apple iphone os 1.0.0
    apple iphone os 2.0.1
    apple iphone os 2.1.1
    apple iphone os 1.1.4
    apple iphone os 2.0.2
    apple iphone os *
    apple iphone os 2.2
    apple iphone os 1.1.1
    apple iphone os 2.0.0
    apple iphone os 1.1.2
    apple iphone os 1.1.3
    apple iphone os 1.1.0
    apple iphone os 2.1
    apple iphone os 1.1.5
    apple iphone os 2.1.1
    apple iphone os 2.0.2
    apple iphone os 1.1.4
    apple iphone os 2.0.1
    apple iphone os 2.2.1
    apple iphone os 2.0
    apple ipod touch *
    apple safari *
    apple iphone 1.0
    apple iphone 1.1.2
    apple iphone 1.1.3
    apple iphone 1.0.1
    apple iphone 1.0.2
    apple iphone 1.02
    apple iphone 1.1.1
    apple ipod touch 1.1
    apple ipod touch 1.1.1
    apple ipod touch 1.1.2
    apple iphone 1.1.4
    apple ipod touch 1.1.3
    apple ipod touch 1.1.4
    apple iphone 2.0.2
    apple ipod touch 2.0.2
    apple ipod touch 2.0.1
    apple ipod touch 2.0
    apple iphone 2.0
    apple iphone 2.0.1
    apple iphone 2.1
    apple iphone 1.1
    apple iphone os 2.2
    apple iphone os 2.2.1
    opera opera browser *
    microsoft ie 5.0
    microsoft ie 6.0
    kde konqueror *
    apple safari *
    mozilla firefox *
    mozilla thunderbird *
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 4.0
    microsoft ie 7.0
    mozilla seamonkey *
    nokia n95 *
    google chrome *
    debian debian linux 5.0
    microsoft ie 8.0
    mandriva linux 2010
    mandriva linux 2010