Lucene search
MitreCVE-2009-1680HistoryJun 19, 2009 - 4:30 p.m.
CVE-2009-1680
2009-06-1916:30:00
CWE-200
mitre
web.nvd.nist.gov
28
cve-2009-1680
safari
apple
iphone os
ipod touch
search history
security vulnerability
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.1
Confidence
Low
EPSS
0.001
Percentile
26.1%
Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history.
Affected configurations
Node
appleiphone_osMatch1.0.0
ORappleiphone_osMatch1.0.1
ORappleiphone_osMatch1.0.2
ORappleiphone_osMatch1.1.0
ORappleiphone_osMatch1.1.1
ORappleiphone_osMatch1.1.2
ORappleiphone_osMatch1.1.3
ORappleiphone_osMatch1.1.4
ORappleiphone_osMatch1.1.5
ORappleiphone_osMatch2.0
ORappleiphone_osMatch2.0.0
ORappleiphone_osMatch2.0.1
ORappleiphone_osMatch2.0.2
ORappleiphone_osMatch2.1
ORappleiphone_osMatch2.1.1
ORappleiphone_osMatch2.2
ORappleiphone_osMatch2.2.1
appleiphone_os
Node
appleiphone_osMatch1.1.0
ORappleiphone_osMatch1.1.1
ORappleiphone_osMatch1.1.2
ORappleiphone_osMatch1.1.3
ORappleiphone_osMatch1.1.4
ORappleiphone_osMatch1.1.5
ORappleiphone_osMatch2.0
ORappleiphone_osMatch2.0.0
ORappleiphone_osMatch2.0.1
ORappleiphone_osMatch2.0.2
ORappleiphone_osMatch2.1
ORappleiphone_osMatch2.1.1
ORappleiphone_osMatch2.2
ORappleiphone_osMatch2.2.1
appleipod_touch
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | iphone_os | 1.0.0 | cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.1 | cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.2 | cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.0 | cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.1 | cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.2 | cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.3 | cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.4 | cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.5 | cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:* |
| apple | iphone_os | 2.0 | cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2009-1680
2009-06-19 16:30:00
cvelist
cvelist
CVE-2009-1680
2009-06-19 16:00:00
prion
prion
Code injection
2009-06-19 16:30:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.1
Confidence
Low
EPSS
0.001
Percentile
26.1%
Related for CVE-2009-1680