JVN#46026251: Safari address bar spoofing vulnerability

Safari contains a vulnerability where the address bar displays a character string that looks like a different URL than the URL that is being accessed.

Impact

Phishing attacks may be possible, due to the difficulty in determining that the URL displayed in the address bar and the URL being accessed are different.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• Safari prior to 5.0
• Safari prior to 4.1