CVE-2009-1707

{"id": "CVE-2009-1707", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-06-10T18:00:00.687", "references": [{"url": "http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/55012", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/35379", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/42314", "source": "cve@mitre.org"}, {"url": "http://support.apple.com/kb/HT3613", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://support.apple.com/kb/HT4456", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/35260", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/35352", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/1522", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/3046", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors."}, {"lang": "es", "value": "Condici\u00f3n de carrera en la implementaci\u00f3n de \"Reset Safari\" en Apple Safari anteriores a la v4.0 en Windows permitir\u00eda a usuarios locales leer contrase\u00f1as web a trav\u00e9s de vectores sin especificar."}], "lastModified": "2010-12-10T06:30:57.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1F650EC-4778-4233-9CF5-2B809CE4C799", "versionEndIncluding": "3.2.3"}, {"criteria": "cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A588615E-EE35-4E19-8BDA-598ED9664686"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E61C168-482B-412A-97E8-B1C651797EDF"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32024B14-B4F7-466E-AEF2-0D3A7E8E1060"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D137F48A-E670-4BDB-B003-C6BB2A33F250"}, {"criteria": "cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85AB4EDB-408D-4D2F-95BE-B578455EFA4E"}, {"criteria": "cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B256D38-257B-4C3D-9EA5-2255BF3A329C"}, {"criteria": "cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "158AEA23-B5DB-4CBC-8391-2D97233A8E9A"}, {"criteria": "cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "218FBDC4-29AF-4BA1-A3FE-4E19B0E3E654"}, {"criteria": "cpe:2.3:a:apple:safari:3.2:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "905F4A8A-49EE-40EB-983C-72C4AFBD98DD"}, {"criteria": "cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDE11F09-3D57-4CF0-8165-90FB234CC403"}, {"criteria": "cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99118352-6845-4704-B4A3-F98E8C06E0FD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}