{ "id": "CVE-2009-1707", "sourceIdentifier": "cve@mitre.org", "published": "2009-06-10T18:00:00.687", "lastModified": "2010-12-10T06:30:57.260", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors." }, { "lang": "es", "value": "Condici\u00f3n de carrera en la implementaci\u00f3n de \"Reset Safari\" en Apple Safari anteriores a la v4.0 en Windows permitir\u00eda a usuarios locales leer contrase\u00f1as web a trav\u00e9s de vectores sin especificar." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "accessVector": "LOCAL", "accessComplexity": "HIGH", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 1.2 }, "baseSeverity": "LOW", "exploitabilityScore": 1.9, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-362" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*", "versionEndIncluding": "3.2.3", "matchCriteriaId": "F1F650EC-4778-4233-9CF5-2B809CE4C799" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*", "matchCriteriaId": "A588615E-EE35-4E19-8BDA-598ED9664686" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*", "matchCriteriaId": "3E61C168-482B-412A-97E8-B1C651797EDF" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*", "matchCriteriaId": "32024B14-B4F7-466E-AEF2-0D3A7E8E1060" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*", "matchCriteriaId": "D137F48A-E670-4BDB-B003-C6BB2A33F250" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*", "matchCriteriaId": "85AB4EDB-408D-4D2F-95BE-B578455EFA4E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*", "matchCriteriaId": "0B256D38-257B-4C3D-9EA5-2255BF3A329C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*", "matchCriteriaId": "158AEA23-B5DB-4CBC-8391-2D97233A8E9A" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*", "matchCriteriaId": "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*", "matchCriteriaId": "905F4A8A-49EE-40EB-983C-72C4AFBD98DD" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*", "matchCriteriaId": "BDE11F09-3D57-4CF0-8165-90FB234CC403" }, { "vulnerable": true, "criteria": "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*", "matchCriteriaId": "99118352-6845-4704-B4A3-F98E8C06E0FD" } ] } ] } ], "references": [ { "url": "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html", "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ] }, { "url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html", "source": "cve@mitre.org" }, { "url": "http://support.apple.com/kb/HT3613", "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ] }, { "url": "http://support.apple.com/kb/HT4456", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/35260", "source": "cve@mitre.org", "tags": [ "Exploit" ] }, { "url": "http://www.securityfocus.com/bid/35352", "source": "cve@mitre.org" }, { "url": "http://www.vupen.com/english/advisories/2009/1522", "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ] }, { "url": "http://www.vupen.com/english/advisories/2010/3046", "source": "cve@mitre.org" } ] }