BID:35339

Apple Safari Windows Installer Local Privilege Escalation Vulnerability

Info

Apple Safari Windows Installer Local Privilege Escalation Vulnerability

Bugtraq ID:	35339
Class:	Design Error
CVE:	CVE-2009-2027
Remote:	No
Local:	Yes
Published:	Jun 08 2009 12:00AM
Updated:	Jun 18 2009 07:00PM
Credit:	Dave English of Lutnos
Vulnerable:	Apple Safari For Windows 3.2.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.1 for Windows Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.1 Beta for Windows Apple Safari 3.1 for Windows Apple Safari 3 Beta for Windows

Not Vulnerable:	Apple Safari 4 for Windows

Discussion

Apple Safari Windows Installer Local Privilege Escalation Vulnerability

Apple Safari is prone to a local privilege-escalation vulnerability.

A local attacker may be able to exploit this issue to gain elevated privileges, which may aid in further attacks.

This issue affects versions prior to Safari 4.0 running on Microsoft Windows XP and Vista.

NOTE: This issue was previously covered in BID 35260 (Apple Safari Prior to 4.0 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Exploit / POC

Apple Safari Windows Installer Local Privilege Escalation Vulnerability

An attacker requires local interactive access to exploit this issue.

Solution / Fix

Apple Safari Windows Installer Local Privilege Escalation Vulnerability

Solution:
Vendor fixes are available. Please see the referenced advisory for details.

Apple Safari 3 Beta for Windows