CVE-2008-1999

2008-04-2818:21:00

mitre

www.cve.org

6 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

JSON

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many “invisible” characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.

References

es.geocities.com/jplopezy/pruebasafari3.html

secunia.com/advisories/29900

securityreason.com/securityalert/3833

www.securityfocus.com/archive/1/491192/100/0/threaded

www.vupen.com/english/advisories/2008/1347

exchange.xforce.ibmcloud.com/vulnerabilities/41981