Apple Safari Top Site Feature Website Promotion Security Vulnerability

Bugtraq ID:	36022
Class:	Input Validation Error
CVE:	CVE-2009-2196
Remote:	Yes
Local:	No
Published:	Aug 11 2009 12:00AM
Updated:	Aug 21 2009 03:46PM
Credit:	Inferno of SecureThoughts.com
Vulnerable:	Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Beta Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3
Not Vulnerable:	Apple Safari 4.0.3 for Windows Apple Safari 4.0.3

Apple Safari Top Site Feature Website Promotion Security Vulnerability

Apple Safari is prone to a vulnerability that may aid in phishing attacks.

An attacker may exploit this issue to promote arbitrary sites into the Top Site views through automated actions. Successful exploits will lead to other attacks.

Versions prior to Apple Safari 4.0.3 are vulnerable.

Apple Safari Top Site Feature Website Promotion Security Vulnerability

An exploit is available from the researcher's advisory in the references section.

Apple Safari Top Site Feature Website Promotion Security Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Apple Safari 4.0.2 for Windows

• Apple SafariQuickTimeSetup-APPLE-SA-2009-08-11-1.exe
  Safari+QuickTime for Windows XP or Vista
  http://www.apple.com/safari/download/


• Apple SafariSetup-APPLE-SA-2009-08-11-1.exe
  Safari for Windows XP or Vista
  http://www.apple.com/safari/download/

Apple Safari 4.0.2

• Apple Safari4.0.3Leo.dmg
  Safari for Mac OS X v10.5.7 and Mac OS X v10.5.8
  http://www.apple.com/safari/download/


• Apple Safari4.0.3Ti.dmg
  Safari for Mac OS X v10.4.11
  http://www.apple.com/safari/download/

Apple Safari Top Site Feature Website Promotion Security Vulnerability

References:

• Hijacking Safari 4 Top Sites with Phish Bombs (Inferno)
  
• Safari Homepage (Apple)
  
• Hijacking Safari 4 Top Sites with Phish Bombs ("Inferno" )