CVE-2009-1701
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari...
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
- Record
CVE-2009-1701- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
- Record
CVE-2009-1701- Updated
- 2026-11-02
EUVDEUVD-2009-1696 No score
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
- Record
EUVD-2009-1696- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2634-634x-5w3q No score
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari...
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
- Record
GHSA-2634-634x-5w3q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1701 is a high vulnerability (CVSS 9.3) in Apple Iphone Os, published June 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.75%, the 94th percentile. No source names a fixed version.
References
support.apple.com/kb/HT3639
secunia.com/advisories/43068
vupen.com/english/advisories/2009/1621
lists.apple.com/archives/security-announce/2009/jun/msg00002.html
securityfocus.com/bid/35260
Show 12 moreShow less
osvdb.org/55008
securitytracker.com/id?1022345
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
zerodayinitiative.com/advisories/ZDI-09-033
nvd.nist.gov/vuln/detail/CVE-2009-1701
github.com/advisories/GHSA-2634-634x-5w3q