CVE-2009-1682
Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate.
Date published : 2009-06-10
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html