What is CVE-2009-4186?

CVE-2009-4186 is a vulnerability in Apple Safari, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-12-03.

Is CVE-2009-4186 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Apple Safari

CVE-2009-4186

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property.

Vulnerability class: Buffer Overflow

EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.

Affected products

Apple Safari — versions 4.0.3
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2009-4186?: CVE-2009-4186 is a vulnerability in Apple Safari, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-12-03.
Is CVE-2009-4186 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.