Exploit for Safari WebKit floating point number buffer overflow

CVE-2009-2195

saint · 2009-09-16

Description

Safari WebKit floating point number buffer overflow CVE-2009-219

Affected Apple Safari versions

Apple Safari≤ 4.0.2, 0.8, 0.9, 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.0, 1.1.1, 1.2, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3, 1.3.0, 1.3.1, 1.3.2, 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.3_417.9.3, 2.0.4, 2.0.4_419.3, 2.0_pre, 3, 3.0, 3.0.0, 3.0.0b, 3.0.1, 3.0.1b, 3.0.2

All known vulnerabilities by product

Safari Webkit

CVSS 9.3 for CVE-2009-2195

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Score

13.3%higher than 95.9% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2009-09-16 00:00

Last Seen:2025-06-26 10:10

Reporter:SAINT Corporation

Other exploits for CVE-2009-2195

Safari WebKit floating point number buffer overflow

2009-09-16 SAINT CorporationSAINT

Safari WebKit floating point number buffer overflow

2009-09-16 SAINT CorporationSAINT

Safari WebKit floating point number buffer overflow

2009-09-16 SAINT CorporationSAINT

WebKit - Floating Point Number Remote Buffer Overflow

2009-08-11 AppleEXPLOITDB

Exploit Code

MARKDOWN34 lines

## https://sploitus.com/exploit?id=SAINT:3A28977735734EF92F2499171BB72149
Added: 09/16/2009  
CVE: CVE-2009-2195  
BID: 36023  
OSVDB: 56988  


### Background

Safari is a web browser for Mac OS X and Windows. Safari is built upon the WebKit browser engine. 

### Problem

A buffer overflow vulnerability in WebKit allows command execution when a user loads a page which contains a specially crafted floating point number. 

### Resolution

Upgrade to Safari 4.0.3 or higher. 

### References

http://support.apple.com/kb/HT3733   


### Limitations

Exploit works on Safari 4.0.2 and requires a user to load the exploit page. 

After the page is loaded, there may be a delay before the exploit succeeds. 

### Platforms

Windows XP  
Mac OS X 10.4

Exploit Code

Share

Share on social media: