Description
Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | kdegraphics | 4:3.5.9-3+lenny2 | DSA-1866-1 |
| Debian 4.0 | kdegraphics | 4:3.5.5-3etch4 | DSA-1866-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kdegraphics +1 | 7:3.5.4-13.el5_3 | RHSA-2009:1130 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | kdegraphics +1 | 7:3.5.4-13.el5_3 | RHSA-2009:1130 |
Advisories 2
- RHSA-2009:1130 Red Hat Security Advisory: kdegraphics security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1866-1 kdegraphics - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.zerodayinitiative.com/advisories/ZDI-09-034/
- 43068 third-party-advisory
- ADV-2011-0212 vdb-entry
- APPLE-SA-2009-06-08-1 vendor-advisory
- 35260 vdb-entry
- oval:org.mitre.oval:def:10162 vdb-entry signature
- RHSA-2009:1130 vendor-advisory
- 35576 third-party-advisory
- ADV-2009-1522 vdb-entry
- 1022345 vdb-entry
- 35334 vdb-entry
- 55013 vdb-entry
- 36461 third-party-advisory
- USN-823-1 vendor-advisory
- SUSE-SR:2011:002 vendor-advisory
- 35379 third-party-advisory
- http://support.apple.com/kb/HT3613
- MDVSA-2010:182 vendor-advisory