Description
WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | webkit | 1.0.1-4+lenny2 | DSA-1950-1 |
Advisories 1
- DSA-1950-1 webkit - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 35446 vdb-entry
- 9160 exploit
- http://support.apple.com/kb/HT3639
- http://www.g-sec.lu/one-bug-to-rule-them-all.html
- 43068 third-party-advisory
- ADV-2009-1621 vdb-entry
- ADV-2011-0212 vdb-entry
- http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121
- 35414 vdb-entry
- 20090715 Re:[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... mailing-list
- 37746 third-party-advisory
- APPLE-SA-2009-06-17-1 vendor-advisory
- 36977 third-party-advisory
- DSA-1950 vendor-advisory
- SUSE-SR:2011:002 vendor-advisory
- 20090716 Re[2]: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... mailing-list
- 55242 vdb-entry
- 20090715 [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... mailing-list
- https://bugs.webkit.org/show_bug.cgi?id=23319
- 20090715 Re: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3.... mailing-list