First published: Wed Jun 10 2009(Updated: )
The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | =3.2 | |
Apple Safari | =3.0.1 | |
Apple Safari | =3.1.2 | |
Apple Safari | <=3.2.3 | |
Apple Safari | =3.0.3 | |
Apple Safari | =3.0.2 | |
Apple Safari | =3.1.1 | |
Apple Safari | =3.0 | |
Apple Safari | =3.1 | |
Apple Safari | =3.2.2 | |
Apple Safari | =3.2.1 | |
Apple Safari | =3.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-2027 is considered a moderate severity vulnerability due to the potential for privileged escalation.
To fix CVE-2009-2027, upgrade Apple Safari to version 4.0 or later on Windows.
CVE-2009-2027 affects Apple Safari versions prior to 4.0 on Windows.
Yes, local users can exploit CVE-2009-2027 by selecting an option that launches the application immediately post-installation.
CVE-2009-2027 may allow unauthorized local users to gain elevated privileges, compromising system security.