PT-2009-4193 · Apple · Safari

Billy Rios · Publicado 2009-06-10 · Atualizado 2009-06-19 · CVE-2009-1716

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Apple Safari version 3.x and earlier on Windows

Description: The issue concerns the improper protection of temporary files created for downloads. This allows local users to obtain sensitive information by reading these files.

Recommendations: For Apple Safari version 3.x and earlier on Windows, update to version 4.0 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1716

Produtos afetados

Safari

Referências · 8

• 🔥 http://securityfocus.com/bid/35260 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1716 · Nota de Segurança
• http://securityfocus.com/bid/35347 · Nota
• http://support.apple.com/kb/HT3613 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1522 · Aviso do Fabricante
• http://secunia.com/advisories/35379 · Nota
• http://securitytracker.com/id?1022342 · Nota