BID:35352

Apple Safari for Windows Reset Password Information Disclosure Vulnerability

Info

Apple Safari for Windows Reset Password Information Disclosure Vulnerability

Bugtraq ID:	35352
Class:	Race Condition Error
CVE:	CVE-2009-1707
Remote:	No
Local:	Yes
Published:	Jun 08 2009 12:00AM
Updated:	Nov 22 2010 05:56PM
Credit:	Philippe Couturier of izypage.com; Andrew Wellington of The Australian National University
Vulnerable:	Apple Safari For Windows 3.2.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.1 for Windows Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.1 Beta for Windows Apple Safari 3.1 for Windows Apple Safari 3 Beta for Windows Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.1 Apple iPhone 4.0 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2

Not Vulnerable:	Apple Safari 4 for Windows Apple iOS 4.2

Discussion

Apple Safari for Windows Reset Password Information Disclosure Vulnerability

Apple Safari is prone to a local information-disclosure vulnerability.

A local attacker can exploit this issue to obtain sensitive information that may aid in further attacks.

This issue affects versions prior to Safari 4.0 running on Microsoft Windows XP and Vista.

NOTE: This issue was previously covered in BID 35260 (Apple Safari Prior to 4.0 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Exploit / POC

Apple Safari for Windows Reset Password Information Disclosure Vulnerability

A local attacker can use common tools to exploit this issue.

Solution / Fix

Apple Safari for Windows Reset Password Information Disclosure Vulnerability

Solution:
Vendor fixes are available. Please see the referenced advisory for details.

Apple Safari 3 Beta for Windows