CVE-2009-1696 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2009-1696

Modified

More Info Official Page

Source-cve@mitre.org

Published At-10 Jun, 2009 | 18:00

Updated At-23 Apr, 2026 | 00:35

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

>>safari>>Versions up to 4.0_beta(inclusive)

cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*

>>safari>>0.8

cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*

>>safari>>0.9

cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*

>>safari>>1.0

cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*

>>safari>>1.0.3

cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*

>>safari>>1.1

cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*

>>safari>>1.2

cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*

>>safari>>1.3

cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*

>>safari>>1.3.1

cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*

>>safari>>1.3.2

cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*

>>safari>>2.0

cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*

>>safari>>2.0.2

cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*

>>safari>>2.0.4

cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*

>>safari>>3.0

cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*

>>safari>>3.0.2

cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*

>>safari>>3.0.3

cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*

>>safari>>3.0.4

cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*

>>safari>>3.1

cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*

>>safari>>3.1.1

cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*

>>safari>>3.1.2

cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*

>>safari>>3.2.1

cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*

>>safari>>3.2.3

cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*

>>safari>>Versions up to 3.2.3(inclusive)

cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*

>>safari>>3.0

cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*

>>safari>>3.0.1

cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*

>>safari>>3.0.2

cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*

>>safari>>3.0.3

cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*

>>safari>>3.0.4

cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*

>>safari>>3.1

cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*

>>safari>>3.1.1

cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*

>>safari>>3.1.2

cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*

>>safari>>3.2

cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*

>>safari>>3.2.1

cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*

>>safari>>3.2.2

cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-310	Primary	nvd@nist.gov

CWE ID: CWE-310

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html	cve@mitre.org	Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	cve@mitre.org	N/A
http://osvdb.org/55027	cve@mitre.org	N/A
http://secunia.com/advisories/35379	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/43068	cve@mitre.org	N/A
http://support.apple.com/kb/HT3613	cve@mitre.org	Patch Vendor Advisory
http://support.apple.com/kb/HT3639	cve@mitre.org	N/A
http://www.securityfocus.com/bid/35260	cve@mitre.org	Exploit
http://www.vupen.com/english/advisories/2009/1522	cve@mitre.org	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2009/1621	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0212	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/55027	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/35379	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT3613	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://support.apple.com/kb/HT3639	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/35260	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.vupen.com/english/advisories/2009/1522	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2009/1621	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://osvdb.org/55027

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/35379

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/43068

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT3613

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3639

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/35260

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.vupen.com/english/advisories/2009/1522

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2009/1621

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://osvdb.org/55027

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://secunia.com/advisories/35379

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT3613

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3639

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/35260

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://www.vupen.com/english/advisories/2009/1522

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2009/1621

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A