CVE-2009-5098

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a refresh tag, which triggers a floating point exception.

Affected products

Webos

Hp Palm Pre Webos

≤ 1.1.0, 1.0.2, 1.0.3, 1.0.4

Fix

Available

CVSS 2.0

5.4 MEDIUM

EPSS

3.9% (90th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2011-09-13