CVE-2009-1692

WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.

Published: 2009-06-19 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2009-1692 is rated Moderate Risk (59.8/100): CVSS High severity, with medium exploitation likelihood (EPSS 4.24%). Mandatory action: Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2009-1692

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 4.27% 4.24% -0.03%
2 2025-09-15 4.00% 4.27% +0.27%
3 2025-03-30 4.00%

Full EPSS history (10 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2009-1692

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.1 2.0 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:C)
Complete availability impact.
8.6 6.9 [email protected]

Weakness enumeration for CVE-2009-1692

OS Trackers for CVE-2009-1692

vendor priority summary link
ubuntu low CVE-2009-1692 low priority: Ubuntu including 2 source packages (qt4-x11, webkit), 18 status rows across 9 suites (dapper, hardy, intrepid, jaunty, karmic, lucid, maverick, natty, upstream): not-affected 10, ignored 5, needs-triage 2, DNE 1. https://ubuntu.com/security/CVE-2009-1692

Affected software / configurations for CVE-2009-1692

Vendor Product Version Raw CPE
apple iphone_os 1.0.0 cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
apple iphone_os 1.0.1 cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
apple iphone_os 1.0.2 cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
apple iphone_os 1.1.0 cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
apple iphone_os 1.1.1 cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
apple iphone_os 1.1.2 cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
apple iphone_os 1.1.3 cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
apple iphone_os 1.1.4 cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
apple iphone_os 1.1.5 cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
apple iphone_os 2.0 cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
apple iphone_os 2.0.0 cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
apple iphone_os 2.0.1 cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
apple iphone_os 2.0.2 cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
apple iphone_os 2.1 cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
apple iphone_os 2.1.1 cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
apple iphone_os 2.2 cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
apple iphone_os 2.2.1 cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
apple iphone_os cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple ipod_touch cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*
apple safari cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

References for CVE-2009-1692

URL Tags
http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/55242
http://secunia.com/advisories/36977
http://secunia.com/advisories/37746
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3639 Vendor Advisory
http://www.debian.org/security/2009/dsa-1950
http://www.g-sec.lu/one-bug-to-rule-them-all.html
http://www.securityfocus.com/archive/1/504969/100/0/threaded
http://www.securityfocus.com/archive/1/504988/100/0/threaded
http://www.securityfocus.com/archive/1/504989/100/0/threaded
http://www.securityfocus.com/archive/1/505006/100/0/threaded
http://www.securityfocus.com/bid/35414
http://www.securityfocus.com/bid/35446
http://www.vupen.com/english/advisories/2009/1621
http://www.vupen.com/english/advisories/2011/0212
https://bugs.webkit.org/show_bug.cgi?id=23319
https://www.exploit-db.com/exploits/9160
cvelogic Threat Intelligence