PT-2009-5176 · Google+1 · Google Chrome+1

Jan Lieskovsky · Published 2009-11-13 · Updated 2021-11-08 · CVE-2009-2816

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 4.0.4 Google Chrome versions prior to 3.0.195.33

Description The implementation of Cross-Origin Resource Sharing (CORS) in WebKit includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight. This makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page. WebKit sends a preflight request to the server for access to the resource and includes custom HTTP headers specified by the requesting page in the preflight request.

Recommendations For Apple Safari versions prior to 4.0.4, update to version 4.0.4 or later to resolve the issue. For Google Chrome versions prior to 3.0.195.33, update to version 3.0.195.33 or later to resolve the issue. As a temporary workaround, consider restricting access to custom HTTP headers in preflight requests until a patch is available.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2009-2816

Affected Products

Google Chrome

Safari

References · 24

• http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2816 · Security Note
• http://support.apple.com/kb/HT4225 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-November/msg00549.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3217 · Vendor Advisory
• http://support.apple.com/kb/HT3949 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-2816 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-November/msg00545.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3233 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0212 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516 · Note
• http://securitytracker.com/id?1023165 · Note
• http://osvdb.org/59940 · Note