CVE-2009-1707

Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors.

Affected products

Safari

Apple Safari

≤ 3.2.3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1, 3.1.1, 3.1.2, 3.2, 3.2.1, 3.2.2

Fix

Available

CVSS 2.0

1.2 LOW

EPSS

0.3% (24th percentile)

Weakness

CWE-362

NVD status

Modified

Published

2009-06-10