CVEvulnerability
CVE-2009-1696
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.
Affected configurations
• apple safari (<= 4.0 beta)
• apple safari 0.8
• apple safari 0.9
• apple safari 1.0
• apple safari 1.0.3
• apple safari 1.1
• apple safari 1.2
• apple safari 1.3
• apple safari 1.3.1
• apple safari 1.3.2
• apple safari 2.0
• apple safari 2.0.2
• apple safari 2.0.4
• apple safari 3.0
• apple safari 3.0.2
• apple safari 3.0.3
• apple safari 3.0.4
• apple safari 3.1
• apple safari 3.1.1
• apple safari 3.1.2
• apple safari 3.2.1
• apple safari 3.2.3
• apple safari (<= 3.2.3)
• apple safari 3.0.1
• apple safari 3.2
• apple safari 3.2.2
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/55027 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://secunia.com/advisories/43068 secunia.com
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3639 support.apple.com
- http://www.securityfocus.com/bid/35260 Exploit
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/55027 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://secunia.com/advisories/43068 secunia.com
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3639 support.apple.com
- http://www.securityfocus.com/bid/35260 Exploit
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com