PT-2009-4646 · Apple · Safari

Inferno · Published 2009-08-12 · Updated 2009-08-18 · CVE-2009-2196

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 4.0.3

Description The issue allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors.

Recommendations For versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-2196

Affected Products

Safari

References · 5

• http://securityfocus.com/bid/36022 · Patch
• http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html · Vendor Advisory
• http://support.apple.com/kb/HT3733 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2196 · Security Note
• http://securitytracker.com/id?1022718 · Note