CVEvulnerability
CVE-2009-1680
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-06-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history.
Affected configurations
• apple iphone os 1.0.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1.0
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
• apple iphone os 2.1.1
• apple iphone os 2.2
• apple iphone os 2.2.1
• apple iphone os
• apple ipod touch
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
- http://osvdb.org/55240 osvdb.org
- http://support.apple.com/kb/HT3639 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35414 www.securityfocus.com
- http://www.securityfocus.com/bid/35448 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
- http://osvdb.org/55240 osvdb.org
- http://support.apple.com/kb/HT3639 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35414 www.securityfocus.com
- http://www.securityfocus.com/bid/35448 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com