CVE-2009-1682

Published: Jun 10, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate.

Affected (34)

Products: Apple: Safari

Apple

1 product

Safari

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 4.0_beta
Apple Safari	Version 0.8
Apple Safari	Version 0.9
Apple Safari	Version 1.0.3
Apple Safari	Version 1.0
Apple Safari	Version 1.1
Apple Safari	Version 1.2
Apple Safari	Version 1.3.1
Apple Safari	Version 1.3.2
Apple Safari	Version 1.3
Apple Safari	Version 2.0.2
Apple Safari	Version 2.0.4
Apple Safari	Version 2.0
Apple Safari	Version 3.0.2
Apple Safari	Version 3.0.3
Apple Safari	Version 3.0.4
Apple Safari	Version 3.0
Apple Safari	Version 3.1.1
Apple Safari	Version 3.1.2
Apple Safari	Version 3.1
Apple Safari	Version 3.2.1
Apple Safari	Version 3.2.3

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 3.2.3
Apple Safari	Version 3.0.1
Apple Safari	Version 3.0.2
Apple Safari	Version 3.0.3
Apple Safari	Version 3.0.4
Apple Safari	Version 3.0
Apple Safari	Version 3.1.1
Apple Safari	Version 3.1.2
Apple Safari	Version 3.1
Apple Safari	Version 3.2.1
Apple Safari	Version 3.2.2
Apple Safari	Version 3.2