NVD

Id
48965  
Name
CVE-2009-1696  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247483 48965 CVE-2009-1696 APPLE-SA-2009-06-08-1  View
247484 48965 CVE-2009-1696 APPLE-SA-2009-06-17-1  View
247485 48965 CVE-2009-1696 SUSE-SR:2011:002  View
247486 48965 CVE-2009-1696 http://support.apple.com/kb/HT3613  View
247487 48965 CVE-2009-1696 http://support.apple.com/kb/HT3639  View
247488 48965 CVE-2009-1696 35260  View
247489 48965 CVE-2009-1696 ADV-2009-1522  View
247490 48965 CVE-2009-1696 ADV-2009-1621  View
247491 48965 CVE-2009-1696 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40765 JVNDB-2009-001771 複数の Apple 製品における Safari ユーザのセッションを追跡可能な脆弱性 複数の Apple 製品の WebKit には、JavaScript アプリケーションにおいて予想可能な乱数を使用するため、リモートの Web サーバが Safari ユーザのセッションを追跡可能な脆弱性が存在します。 CVE-2009-1696 39127 CVE-2009-1696 48965 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001771.html 2009-06-08 2009-07-16 View