CVE-2009-1696

Опубликовано: 10 июн. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.

Ссылки

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/55027
http://secunia.com/advisories/35379
Vendor Advisory
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory
http://support.apple.com/kb/HT3639
http://www.securityfocus.com/bid/35260
Exploit
http://www.vupen.com/english/advisories/2009/1522
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2009/1621
http://www.vupen.com/english/advisories/2011/0212
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/55027
http://secunia.com/advisories/35379
Vendor Advisory
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory
http://support.apple.com/kb/HT3639

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*

Версия до 4.0_beta (включая)

cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*

Версия до 3.2.3 (включая)

cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*

EPSS

Процентиль: 82%

0.02335

Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2009-1696

ubuntu

около 17 лет назад

CVE-2009-1696

debian

около 17 лет назад

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iP ...

GHSA-h49m-8hrm-3pg8

github

больше 4 лет назад

EPSS

Процентиль: 82%

0.02335

Низкий

5 Medium

CVSS2

Дефекты

CWE-310