CVEvulnerability
CVE-2009-1706
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie.
Affected configurations
• apple safari (<= 3.2.3)
• apple safari 3.0
• apple safari 3.0.1
• apple safari 3.0.2
• apple safari 3.0.3
• apple safari 3.0.4
• apple safari 3.1
• apple safari 3.1.1
• apple safari 3.1.2
• apple safari 3.2
• apple safari 3.2.1
• apple safari 3.2.2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://osvdb.org/54997 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35260 Exploit, Patch
- http://www.securityfocus.com/bid/35346 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://osvdb.org/54997 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35260 Exploit, Patch
- http://www.securityfocus.com/bid/35346 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory