Unscored CVE-2009-1682 EUVD-2009-1677GHSA-86p2-3vx8-3fwp

Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attacke…

Published Jun 10, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate.

References

35353 vdb-entry
APPLE-SA-2009-06-08-1 vendor-advisory
35260 vdb-entry
ADV-2009-1522 vdb-entry
1022346 vdb-entry
54982 vdb-entry
35379 third-party-advisory
http://support.apple.com/kb/HT3613