WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://support.apple.com/kb/HT3639 | x_refsource_CONFIRM |
| http://secunia.com/advisories/43068 | third-party-advisory x_refsource_SECUNIA |
| http://osvdb.org/55027 | vdb-entry x_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2009/1621 | vdb-entry x_refsource_VUPEN |
| http://www.vupen.com/english/advisories/2011/0212 | vdb-entry x_refsource_VUPEN |
| http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html | vendor-advisory x_refsource_APPLE |
| http://www.securityfocus.com/bid/35260 | vdb-entry x_refsource_BID |
| http://www.vupen.com/english/advisories/2009/1522 | vdb-entry x_refsource_VUPEN |
| http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html | vendor-advisory x_refsource_APPLE |
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | vendor-advisory x_refsource_SUSE |
| http://secunia.com/advisories/35379 | third-party-advisory x_refsource_SECUNIA |
| http://support.apple.com/kb/HT3613 | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|