[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-1696Date: (C)2009-06-10   (M)2024-02-22


WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
BID-35260
SECUNIA-35379
SECUNIA-43068
OSVDB-55027
ADV-2009-1522
ADV-2009-1621
ADV-2011-0212
APPLE-SA-2009-06-08-1
APPLE-SA-2009-06-17-1
SUSE-SR:2011:002
http://support.apple.com/kb/HT3613
http://support.apple.com/kb/HT3639

CPE    1
cpe:/a:apple:safari:3.0.2:-:mac
CWE    1
CWE-310
OVAL    2
oval:org.secpod.oval:def:17267
oval:org.secpod.oval:def:17282

© SecPod Technologies