Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate.

The version of Safari installed on the remote Windows host is earlier than 4.0.  It therefore is potentially affected by numerous issues in the following components :

  - CFNetwork
  - CoreGraphics
  - ImageIO
  - International Components for Unicode
  - libxml
  - Safari
  - Safari Windows Installer
  - WebKit

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.  As such, it is potentially affected by numerous issues in the following components :

  - CFNetwork
  - libxml
  - Safari
  - WebKit

The version of Safari installed on the remote host is earlier than 4.0. Such versions are potentially affected by numerous issues in the following components : 

  - CFNetwork

  - CoreGraphics

  - ImageIO

  - International Components for Unicode

  - libxml

  - Safari

  - Safari Windows Installer

  - WebKit



ID	Name	Product	Family	Severity
39339	Safari < 4.0 Multiple Vulnerabilities	Nessus	Windows	high
39338	Mac OS X : Apple Safari < 4.0	Nessus	MacOS X Local Security Checks	high
5046	Safari < 4.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
800993	Safari < 4.0 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2009-1682

high

Tenable Plugins

high

high

high

high