Lucene search
MitreCVE-2009-1706HistoryJun 10, 2009 - 6:00 p.m.
CVE-2009-1706
2009-06-1018:00:00
CWE-200
mitre
web.nvd.nist.gov
24
apple safari
private browsing
cookies
security vulnerability
nvd
cve-2009-1706
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
71.3%
The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie.
Affected configurations
Node
applesafariRange≤3.2.3-windows
ORapplesafariMatch3.0-windows
ORapplesafariMatch3.0.1-windows
ORapplesafariMatch3.0.2-windows
ORapplesafariMatch3.0.3-windows
ORapplesafariMatch3.0.4-windows
ORapplesafariMatch3.1-windows
ORapplesafariMatch3.1.1-windows
ORapplesafariMatch3.1.2-windows
ORapplesafariMatch3.2-windows
ORapplesafariMatch3.2.1-windows
ORapplesafariMatch3.2.2-windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:* |
| apple | safari | 3.0 | cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:* |
| apple | safari | 3.0.1 | cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:* |
| apple | safari | 3.0.2 | cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:* |
| apple | safari | 3.0.3 | cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:* |
| apple | safari | 3.0.4 | cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:* |
| apple | safari | 3.1 | cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:* |
| apple | safari | 3.1.1 | cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:* |
| apple | safari | 3.1.2 | cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:* |
| apple | safari | 3.2 | cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2009-06-10 18:00:00
cvelist
cvelist
CVE-2009-1706
2009-06-10 17:37:00
nvd
nvd
CVE-2009-1706
2009-06-10 18:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
2009-06-16 00:00:00
Apple Safari Multiple Vulnerabilities - 01 - (Jun 2009) - Windows
2009-06-16 00:00:00
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00
nessus
nessus
Safari < 4.0 Multiple Vulnerabilities
2009-06-09 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.2
Confidence
Low
EPSS
0.003
Percentile
71.3%
Related for CVE-2009-1706