PT-2009-4193 · Apple · Safari

Billy Rios · Published 2009-06-10 · Updated 2009-06-19 · CVE-2009-1716

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Apple Safari version 3.x and earlier on Windows

Description: The issue concerns the improper protection of temporary files created for downloads. This allows local users to obtain sensitive information by reading these files.

Recommendations: For Apple Safari version 3.x and earlier on Windows, update to version 4.0 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-1716

Affected Products

Safari

References · 8

• 🔥 http://securityfocus.com/bid/35260 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1716 · Security Note
• http://support.apple.com/kb/HT3613 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/1522 · Vendor Advisory
• http://securityfocus.com/bid/35347 · Note
• http://secunia.com/advisories/35379 · Note
• http://securitytracker.com/id?1022342 · Note