Lucene search
HistoryApr 28, 2008 - 8:05 p.m.
CVE-2008-1999
apple
safari
spoofing
address bar
remote attackers
cve-2008-1999
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
86.9%
Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many “invisible” characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.
Affected configurations
Node
applesafariMatch3.1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:safari | apple safari | eq | 3.1.1 |
Related
cvelist
cvelist
CVE-2008-1999
2008-04-28 18:21:00
nvd
nvd
CVE-2008-1999
2008-04-28 20:05:00
checkpoint_advisories
checkpoint_advisories
Apple Safari for Windows URL Address Spoofing - Ver2 (CVE-2008-1999)
2014-03-31 00:00:00
prion
prion
Design/Logic Flaw
2008-04-28 20:05:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
86.9%
Related for CVE-2008-1999