Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2009-2816

The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 83.5%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2009-2816
  • Apple » Safari » Version: N/A
    cpe:2.3:a:apple:safari:-
  • Apple » Safari » Version: 1.0
    cpe:2.3:a:apple:safari:1.0
  • Apple » Safari » Version: 1.0.0
    cpe:2.3:a:apple:safari:1.0.0
  • Apple » Safari » Version: 1.0.0b1
    cpe:2.3:a:apple:safari:1.0.0b1
  • Apple » Safari » Version: 1.0.0b2
    cpe:2.3:a:apple:safari:1.0.0b2
  • Apple » Safari » Version: 1.0.1
    cpe:2.3:a:apple:safari:1.0.1
  • Apple » Safari » Version: 1.0.2
    cpe:2.3:a:apple:safari:1.0.2
  • Apple » Safari » Version: 1.0.3
    cpe:2.3:a:apple:safari:1.0.3
  • Apple » Safari » Version: 1.0b1
    cpe:2.3:a:apple:safari:1.0b1
  • Apple » Safari » Version: 1.1
    cpe:2.3:a:apple:safari:1.1
  • Apple » Safari » Version: 1.1.0
    cpe:2.3:a:apple:safari:1.1.0
  • Apple » Safari » Version: 1.1.1
    cpe:2.3:a:apple:safari:1.1.1
  • Apple » Safari » Version: 1.2
    cpe:2.3:a:apple:safari:1.2
  • Apple » Safari » Version: 1.2.0
    cpe:2.3:a:apple:safari:1.2.0
  • Apple » Safari » Version: 1.2.1
    cpe:2.3:a:apple:safari:1.2.1
  • Apple » Safari » Version: 1.2.2
    cpe:2.3:a:apple:safari:1.2.2
  • Apple » Safari » Version: 1.2.3
    cpe:2.3:a:apple:safari:1.2.3
  • Apple » Safari » Version: 1.2.4
    cpe:2.3:a:apple:safari:1.2.4
  • Apple » Safari » Version: 1.2.5
    cpe:2.3:a:apple:safari:1.2.5
  • Apple » Safari » Version: 1.3
    cpe:2.3:a:apple:safari:1.3
  • Apple » Safari » Version: 1.3.0
    cpe:2.3:a:apple:safari:1.3.0
  • Apple » Safari » Version: 1.3.1
    cpe:2.3:a:apple:safari:1.3.1
  • Apple » Safari » Version: 1.3.2
    cpe:2.3:a:apple:safari:1.3.2
  • Apple » Safari » Version: 2
    cpe:2.3:a:apple:safari:2
  • Apple » Safari » Version: 2.0
    cpe:2.3:a:apple:safari:2.0
  • Apple » Safari » Version: 2.0.0
    cpe:2.3:a:apple:safari:2.0.0
  • Apple » Safari » Version: 2.0.1
    cpe:2.3:a:apple:safari:2.0.1
  • Apple » Safari » Version: 2.0.2
    cpe:2.3:a:apple:safari:2.0.2
  • Apple » Safari » Version: 2.0.3
    cpe:2.3:a:apple:safari:2.0.3
  • Apple » Safari » Version: 2.0.4
    cpe:2.3:a:apple:safari:2.0.4
  • Apple » Safari » Version: 3
    cpe:2.3:a:apple:safari:3
  • Apple » Safari » Version: 3.0
    cpe:2.3:a:apple:safari:3.0
  • Apple » Safari » Version: 3.0.0
    cpe:2.3:a:apple:safari:3.0.0
  • Apple » Safari » Version: 3.0.0b
    cpe:2.3:a:apple:safari:3.0.0b
  • Apple » Safari » Version: 3.0.1
    cpe:2.3:a:apple:safari:3.0.1
  • Apple » Safari » Version: 3.0.1b
    cpe:2.3:a:apple:safari:3.0.1b
  • Apple » Safari » Version: 3.0.2
    cpe:2.3:a:apple:safari:3.0.2
  • Apple » Safari » Version: 3.0.2b
    cpe:2.3:a:apple:safari:3.0.2b
  • Apple » Safari » Version: 3.0.3
    cpe:2.3:a:apple:safari:3.0.3
  • Apple » Safari » Version: 3.0.3b
    cpe:2.3:a:apple:safari:3.0.3b
  • Apple » Safari » Version: 3.0.4
    cpe:2.3:a:apple:safari:3.0.4
  • Apple » Safari » Version: 3.0.4b
    cpe:2.3:a:apple:safari:3.0.4b
  • Apple » Safari » Version: 3.0.5
    cpe:2.3:a:apple:safari:3.0.5
  • Apple » Safari » Version: 3.1.0
    cpe:2.3:a:apple:safari:3.1.0
  • Apple » Safari » Version: 3.1.0b
    cpe:2.3:a:apple:safari:3.1.0b
  • Apple » Safari » Version: 3.1.1
    cpe:2.3:a:apple:safari:3.1.1
  • Apple » Safari » Version: 3.1.1b
    cpe:2.3:a:apple:safari:3.1.1b
  • Apple » Safari » Version: 3.1.2
    cpe:2.3:a:apple:safari:3.1.2
  • Apple » Safari » Version: 3.1.2b
    cpe:2.3:a:apple:safari:3.1.2b
  • Apple » Safari » Version: 3.2.0
    cpe:2.3:a:apple:safari:3.2.0
  • Apple » Safari » Version: 3.2.0b
    cpe:2.3:a:apple:safari:3.2.0b
  • Apple » Safari » Version: 3.2.1
    cpe:2.3:a:apple:safari:3.2.1
  • Apple » Safari » Version: 3.2.1b
    cpe:2.3:a:apple:safari:3.2.1b
  • Apple » Safari » Version: 3.2.2
    cpe:2.3:a:apple:safari:3.2.2
  • Apple » Safari » Version: 3.2.2b
    cpe:2.3:a:apple:safari:3.2.2b
  • Apple » Safari » Version: 4.0
    cpe:2.3:a:apple:safari:4.0
  • Apple » Safari » Version: 4.0.0b
    cpe:2.3:a:apple:safari:4.0.0b
  • Apple » Safari » Version: 4.0.1
    cpe:2.3:a:apple:safari:4.0.1
  • Apple » Safari » Version: 4.0.2
    cpe:2.3:a:apple:safari:4.0.2
  • Apple » Safari » Version: 4.0.3
    cpe:2.3:a:apple:safari:4.0.3
  • Google » Chrome » Version: N/A
    cpe:2.3:a:google:chrome:-
  • Google » Chrome » Version: 0.1.38.1
    cpe:2.3:a:google:chrome:0.1.38.1
  • Google » Chrome » Version: 0.1.38.2
    cpe:2.3:a:google:chrome:0.1.38.2
  • Google » Chrome » Version: 0.1.38.4
    cpe:2.3:a:google:chrome:0.1.38.4
  • Google » Chrome » Version: 0.1.40.1
    cpe:2.3:a:google:chrome:0.1.40.1
  • Google » Chrome » Version: 0.1.42.2
    cpe:2.3:a:google:chrome:0.1.42.2
  • Google » Chrome » Version: 0.1.42.3
    cpe:2.3:a:google:chrome:0.1.42.3
  • Google » Chrome » Version: 0.2.149.27
    cpe:2.3:a:google:chrome:0.2.149.27
  • Google » Chrome » Version: 0.2.149.29
    cpe:2.3:a:google:chrome:0.2.149.29
  • Google » Chrome » Version: 0.2.149.30
    cpe:2.3:a:google:chrome:0.2.149.30
  • Google » Chrome » Version: 0.2.152.1
    cpe:2.3:a:google:chrome:0.2.152.1
  • Google » Chrome » Version: 0.2.153.1
    cpe:2.3:a:google:chrome:0.2.153.1
  • Google » Chrome » Version: 0.3.154.0
    cpe:2.3:a:google:chrome:0.3.154.0
  • Google » Chrome » Version: 0.3.154.3
    cpe:2.3:a:google:chrome:0.3.154.3
  • Google » Chrome » Version: 0.4.154.18
    cpe:2.3:a:google:chrome:0.4.154.18
  • Google » Chrome » Version: 0.4.154.22
    cpe:2.3:a:google:chrome:0.4.154.22
  • Google » Chrome » Version: 0.4.154.31
    cpe:2.3:a:google:chrome:0.4.154.31
  • Google » Chrome » Version: 0.4.154.33
    cpe:2.3:a:google:chrome:0.4.154.33
  • Google » Chrome » Version: 1.0.154.36
    cpe:2.3:a:google:chrome:1.0.154.36
  • Google » Chrome » Version: 1.0.154.39
    cpe:2.3:a:google:chrome:1.0.154.39
  • Google » Chrome » Version: 1.0.154.42
    cpe:2.3:a:google:chrome:1.0.154.42
  • Google » Chrome » Version: 1.0.154.43
    cpe:2.3:a:google:chrome:1.0.154.43
  • Google » Chrome » Version: 1.0.154.46
    cpe:2.3:a:google:chrome:1.0.154.46
  • Google » Chrome » Version: 1.0.154.48
    cpe:2.3:a:google:chrome:1.0.154.48
  • Google » Chrome » Version: 1.0.154.52
    cpe:2.3:a:google:chrome:1.0.154.52
  • Google » Chrome » Version: 1.0.154.53
    cpe:2.3:a:google:chrome:1.0.154.53
  • Google » Chrome » Version: 1.0.154.59
    cpe:2.3:a:google:chrome:1.0.154.59
  • Google » Chrome » Version: 1.0.154.64
    cpe:2.3:a:google:chrome:1.0.154.64
  • Google » Chrome » Version: 1.0.154.65
    cpe:2.3:a:google:chrome:1.0.154.65
  • Google » Chrome » Version: 2.0.156.1
    cpe:2.3:a:google:chrome:2.0.156.1
  • Google » Chrome » Version: 2.0.157.0
    cpe:2.3:a:google:chrome:2.0.157.0
  • Google » Chrome » Version: 2.0.157.2
    cpe:2.3:a:google:chrome:2.0.157.2
  • Google » Chrome » Version: 2.0.158.0
    cpe:2.3:a:google:chrome:2.0.158.0
  • Google » Chrome » Version: 2.0.159.0
    cpe:2.3:a:google:chrome:2.0.159.0
  • Google » Chrome » Version: 2.0.169.0
    cpe:2.3:a:google:chrome:2.0.169.0
  • Google » Chrome » Version: 2.0.169.1
    cpe:2.3:a:google:chrome:2.0.169.1
  • Google » Chrome » Version: 2.0.170.0
    cpe:2.3:a:google:chrome:2.0.170.0
  • Google » Chrome » Version: 2.0.172
    cpe:2.3:a:google:chrome:2.0.172
  • Google » Chrome » Version: 2.0.172.2
    cpe:2.3:a:google:chrome:2.0.172.2
  • Google » Chrome » Version: 2.0.172.27
    cpe:2.3:a:google:chrome:2.0.172.27
  • Google » Chrome » Version: 2.0.172.28
    cpe:2.3:a:google:chrome:2.0.172.28
  • Google » Chrome » Version: 2.0.172.30
    cpe:2.3:a:google:chrome:2.0.172.30
  • Google » Chrome » Version: 2.0.172.31
    cpe:2.3:a:google:chrome:2.0.172.31
  • Google » Chrome » Version: 2.0.172.33
    cpe:2.3:a:google:chrome:2.0.172.33
  • Google » Chrome » Version: 2.0.172.37
    cpe:2.3:a:google:chrome:2.0.172.37
  • Google » Chrome » Version: 2.0.172.38
    cpe:2.3:a:google:chrome:2.0.172.38
  • Google » Chrome » Version: 2.0.172.43
    cpe:2.3:a:google:chrome:2.0.172.43
  • Google » Chrome » Version: 2.0.172.8
    cpe:2.3:a:google:chrome:2.0.172.8
  • Google » Chrome » Version: 3.0
    cpe:2.3:a:google:chrome:3.0
  • Google » Chrome » Version: 3.0.182.2
    cpe:2.3:a:google:chrome:3.0.182.2
  • Google » Chrome » Version: 3.0.190.2
    cpe:2.3:a:google:chrome:3.0.190.2
  • Google » Chrome » Version: 3.0.193.2
    cpe:2.3:a:google:chrome:3.0.193.2
  • Google » Chrome » Version: 3.0.195.2
    cpe:2.3:a:google:chrome:3.0.195.2
  • Google » Chrome » Version: 3.0.195.21
    cpe:2.3:a:google:chrome:3.0.195.21
  • Google » Chrome » Version: 3.0.195.24
    cpe:2.3:a:google:chrome:3.0.195.24
  • Google » Chrome » Version: 3.0.195.25
    cpe:2.3:a:google:chrome:3.0.195.25
  • Google » Chrome » Version: 3.0.195.27
    cpe:2.3:a:google:chrome:3.0.195.27
  • Google » Chrome » Version: 3.0.195.32
    cpe:2.3:a:google:chrome:3.0.195.32
  • Apple » Iphone Os » Version: N/A
    cpe:2.3:o:apple:iphone_os:-
  • Apple » Iphone Os » Version: 1.0.0
    cpe:2.3:o:apple:iphone_os:1.0.0
  • Apple » Iphone Os » Version: 1.0.1
    cpe:2.3:o:apple:iphone_os:1.0.1
  • Apple » Iphone Os » Version: 1.0.2
    cpe:2.3:o:apple:iphone_os:1.0.2
  • Apple » Iphone Os » Version: 1.1.0
    cpe:2.3:o:apple:iphone_os:1.1.0
  • Apple » Iphone Os » Version: 1.1.1
    cpe:2.3:o:apple:iphone_os:1.1.1
  • Apple » Iphone Os » Version: 1.1.2
    cpe:2.3:o:apple:iphone_os:1.1.2
  • Apple » Iphone Os » Version: 1.1.3
    cpe:2.3:o:apple:iphone_os:1.1.3
  • Apple » Iphone Os » Version: 1.1.4
    cpe:2.3:o:apple:iphone_os:1.1.4
  • Apple » Iphone Os » Version: 1.1.5
    cpe:2.3:o:apple:iphone_os:1.1.5
  • Apple » Iphone Os » Version: 2.0
    cpe:2.3:o:apple:iphone_os:2.0
  • Apple » Iphone Os » Version: 2.0.0
    cpe:2.3:o:apple:iphone_os:2.0.0
  • Apple » Iphone Os » Version: 2.0.1
    cpe:2.3:o:apple:iphone_os:2.0.1
  • Apple » Iphone Os » Version: 2.0.2
    cpe:2.3:o:apple:iphone_os:2.0.2
  • Apple » Iphone Os » Version: 2.1
    cpe:2.3:o:apple:iphone_os:2.1
  • Apple » Iphone Os » Version: 2.1.1
    cpe:2.3:o:apple:iphone_os:2.1.1
  • Apple » Iphone Os » Version: 2.2
    cpe:2.3:o:apple:iphone_os:2.2
  • Apple » Iphone Os » Version: 2.2.1
    cpe:2.3:o:apple:iphone_os:2.2.1
  • Apple » Iphone Os » Version: 3.0
    cpe:2.3:o:apple:iphone_os:3.0
  • Apple » Iphone Os » Version: 3.0.1
    cpe:2.3:o:apple:iphone_os:3.0.1
  • Apple » Iphone Os » Version: 3.1
    cpe:2.3:o:apple:iphone_os:3.1
  • Apple » Iphone Os » Version: 3.1.1
    cpe:2.3:o:apple:iphone_os:3.1.1
  • Apple » Iphone Os » Version: 3.1.2
    cpe:2.3:o:apple:iphone_os:3.1.2
  • Apple » Iphone Os » Version: 3.1.3
    cpe:2.3:o:apple:iphone_os:3.1.3
  • Apple » Iphone Os » Version: 3.2
    cpe:2.3:o:apple:iphone_os:3.2
  • Apple » Iphone Os » Version: 3.2.1
    cpe:2.3:o:apple:iphone_os:3.2.1
  • Apple » Iphone Os » Version: 3.2.2
    cpe:2.3:o:apple:iphone_os:3.2.2
  • Fedoraproject » Fedora » Version: 11
    cpe:2.3:o:fedoraproject:fedora:11
  • Fedoraproject » Fedora » Version: 12
    cpe:2.3:o:fedoraproject:fedora:12
  • Opensuse » Opensuse » Version: 11.2
    cpe:2.3:o:opensuse:opensuse:11.2
  • Opensuse » Opensuse » Version: 11.3
    cpe:2.3:o:opensuse:opensuse:11.3


Contact Us

Shodan ® - All rights reserved