CVE-2009-2195

high · 9.3

Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.

9.3

CVSS

13.3%

EPSS (exploit prob.)

96th

EPSS percentile

2009-08-12

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
apple	mac_os_x	10.4.
apple	mac_os_x	10.5.7
apple	mac_os_x	10.5.8
apple	mac_os_x_server	10.4.11
apple	mac_os_x_server	10.5.7
apple	mac_os_x_server	10.5.8
microsoft	windows_vista	all versions
microsoft	windows_xp	all versions
apple	safari	<= 4.0.2
apple	safari	0.8
apple	safari	0.9
apple	safari	1.0
apple	safari	1.0
apple	safari	1.0
apple	safari	1.0.0
apple	safari	1.0.0b1
apple	safari	1.0.0b2
apple	safari	1.0.1
apple	safari	1.0.2
apple	safari	1.0.3
apple	safari	1.0.3
apple	safari	1.0.3
apple	safari	1.1
apple	safari	1.1.0
apple	safari	1.1.1
apple	safari	1.2
apple	safari	1.2.0
apple	safari	1.2.1
apple	safari	1.2.2
apple	safari	1.2.3
apple	safari	1.2.4
apple	safari	1.2.5
apple	safari	1.3
apple	safari	1.3.0
apple	safari	1.3.1
apple	safari	1.3.2
apple	safari	1.3.2
apple	safari	1.3.2
apple	safari	2.0
apple	safari	2.0.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-2195