CVE-2009-0070

Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2009-01-08

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• Safari (Apple)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/48214
• https://www.exploit-db.com/exploits/7673