CVE-2008-3644

Published: Nov 17, 2008Modified: Apr 23, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache.

Affected (42)

Products: Apple: Safari

Apple

1 product

Safari

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 3.1.2
Apple Safari	All versions
Apple Safari	Version 0.8
Apple Safari	Version 0.9
Apple Safari	Version 1.0.3
Apple Safari	Version 1.0
Apple Safari	Version 1.0 beta2
Apple Safari	Version 1.0 beta
Apple Safari	Version 1.1.1
Apple Safari	Version 1.1
Apple Safari	Version 1.2.1
Apple Safari	Version 1.2.2
Apple Safari	Version 1.2.3
Apple Safari	Version 1.2.4
Apple Safari	Version 1.2.5
Apple Safari	Version 1.2
Apple Safari	Version 1.3.1
Apple Safari	Version 1.3.2
Apple Safari	Version 1.3
Apple Safari	Version 2.0.1
Apple Safari	Version 2.0.2
Apple Safari	Version 2.0.3
Apple Safari	Version 2.0.3_417.9.3
Apple Safari	Version 2.0.4
Apple Safari	Version 2.0.4_419.3
Apple Safari	Version 2.0
Apple Safari	Version 2.0_pre
Apple Safari	Version 2
Apple Safari	Version 3.0.1
Apple Safari	Version 3.0.1
Apple Safari	Version 3.0.2
Apple Safari	Version 3.0.2
Apple Safari	Version 3.0.3
Apple Safari	Version 3.0.3
Apple Safari	Version 3.0.4
Apple Safari	Version 3.0.4_beta
Apple Safari	Version 3.0.4_beta
Apple Safari	Version 3.0
Apple Safari	Version 3.0
Apple Safari	Version 3.1.1
Apple Safari	Version 3.1
Apple Safari	Version 3