PT-2008-5014 · Apple · Safari

Published 2008-11-17 · Updated 2012-10-31 · CVE-2008-3644

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 3.2

Description The issue allows local users to obtain sensitive information by reading the browser's page cache, due to improper prevention of caching of form data for form fields that have autocomplete disabled.

Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-3644

Affected Products

Safari

References · 10

• http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3644 · Security Note
• http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html · Vendor Advisory
• http://support.apple.com/kb/HT3298 · Vendor Advisory
• http://vupen.com/english/advisories/2008/3232 · Note
• http://support.apple.com/kb/HT3318 · Note
• http://secunia.com/advisories/32706 · Note
• http://secunia.com/advisories/32756 · Note
• http://securityfocus.com/bid/32291 · Note
• http://securitytracker.com/id?1021226 · Note