Apple Safari cached object history enumeration Vulnerability

Release date: 2011-12-20
Updated on: 2011-12-21

Affected Systems:
Apple Safari 5.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-4692

Safari is the browser in Mac OS X, the latest operating system of Apple Computer. It uses KDE's KHTML as the core of browser computing.

An error occurs when Apple Safari processes cached objects. Malicious users can exploit this vulnerability to enumerate browsed sites and expose sensitive information.

<* Source: Edward W. Felten

Link: http://secunia.com/advisories/47319/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://support.apple.com/