CVE-2008-3644

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-17 · updated 2026-06-16
Weakness: CWE-200

Description

Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache.

Affected products

Apple Safari: through 3.1.2; 0.8, 0.9, 1.0, 1.0-beta, 1.0-beta2, 1.0.3 (+29)

References

http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
http://secunia.com/advisories/32706
http://secunia.com/advisories/32756
http://support.apple.com/kb/HT3298
http://support.apple.com/kb/HT3318
http://www.securityfocus.com/bid/32291
http://www.securitytracker.com/id?1021226
http://www.vupen.com/english/advisories/2008/3232
http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html
http://secunia.com/advisories/32706

Get alerted when CVE-2008-3644 or the next vulnerability affects your stack