Lucene search

MitreCVE-2009-2196

HistoryAug 12, 2009 - 7:30 p.m.

CVE-2009-2196

2009-08-1219:30:00

mitre

web.nvd.nist.gov

cve-2009-2196

apple safari

vulnerability

remote web servers

top sites view

phishing attacks

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

64.9%

JSON

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors.

Affected configurations

Nvd

Node

applemac_os_xMatch10.4.

applemac_os_xMatch10.5.7

applemac_os_xMatch10.5.8

applemac_os_x_serverMatch10.4.11

applemac_os_x_serverMatch10.5.7

applemac_os_x_serverMatch10.5.8

microsoftwindows_vista

microsoftwindows_xp

AND

applesafariMatch4.0

applesafariMatch4.0.1

applesafariMatch4.0.2

VendorProductVersionCPE
applemac_os_x10.4.cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*
applemac_os_x10.5.7cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*
applemac_os_x10.5.8cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*
applemac_os_x_server10.4.11cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*
applemac_os_x_server10.5.7cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*
applemac_os_x_server10.5.8cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*
microsoftwindows_vista*cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*
applesafari4.0cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*
applesafari4.0.1cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4.	cpe:2.3:o:apple:mac_os_x:10.4.:::::::*
apple	mac_os_x	10.5.7	cpe:2.3:o:apple:mac_os_x:10.5.7:::::::*
apple	mac_os_x	10.5.8	cpe:2.3:o:apple:mac_os_x:10.5.8:::::::*
apple	mac_os_x_server	10.4.11	cpe:2.3:o:apple:mac_os_x_server:10.4.11:::::::*
apple	mac_os_x_server	10.5.7	cpe:2.3:o:apple:mac_os_x_server:10.5.7:::::::*
apple	mac_os_x_server	10.5.8	cpe:2.3:o:apple:mac_os_x_server:10.5.8:::::::*
microsoft	windows_vista	*	cpe:2.3:o:microsoft:windows_vista::::::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::::::::
apple	safari	4.0	cpe:2.3:a:apple:safari:4.0:::::::*
apple	safari	4.0.1	cpe:2.3:a:apple:safari:4.0.1:::::::*

Rows per page:

1-10 of 111

References

lists.apple.com/archives/security-announce/2009/Aug/msg00002.html

support.apple.com/kb/HT3733

www.securityfocus.com/bid/36022

www.securitytracker.com/id?1022718

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

64.9%

JSON

Related for CVE-2009-2196