CVE-2009-1707 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	1.2 UNKNOWN	LOCAL	HIGH		AV:L/AC:H/Au:N/C:P/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 21%

Vendor	Product	Version
apple	safari	𝑥 ≤ 3.2.3
apple	safari	3.0
apple	safari	3.0.1
apple	safari	3.0.2
apple	safari	3.0.3
apple	safari	3.0.4
apple	safari	3.1
apple	safari	3.1.1
apple	safari	3.1.2
apple	safari	3.2
apple	safari	3.2.1
apple	safari	3.2.2

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

http://osvdb.org/55012

http://secunia.com/advisories/35379

http://secunia.com/advisories/42314

http://support.apple.com/kb/HT3613

http://support.apple.com/kb/HT4456

http://www.securityfocus.com/bid/35260

http://www.securityfocus.com/bid/35352

http://www.vupen.com/english/advisories/2009/1522

http://www.vupen.com/english/advisories/2010/3046

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

http://osvdb.org/55012

http://secunia.com/advisories/35379

http://secunia.com/advisories/42314

http://support.apple.com/kb/HT3613

http://support.apple.com/kb/HT4456

http://www.securityfocus.com/bid/35260

http://www.securityfocus.com/bid/35352

http://www.vupen.com/english/advisories/2009/1522

http://www.vupen.com/english/advisories/2010/3046