CVE-2010-1796

The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields...

CVE-2010-1796

The CVE-2010-1796 issue affects Safari before 5.0.1 on Mac OS X 10.5–10.6 and Windows, and before 4.1.1 on Mac OS X 10.4. An implementation flaw in AutoFill lets a malicious website trigger AutoFill without user action, exposing Address Book Card data via JavaScript keystroke events. The security...

CVE-2010-1796

Removed by vendor...

Apple Fixes AutoFill Flaw in Massive Safari Update

LAS VEGAS–Apple has released a major update to its Safari browser that includes a number of security fixes, most importantly a patch for the AutoFill vulnerability disclosed recently. Safari 5.0, which was released Wednesday by Apple, gives users protection against several flaws, including the...

Safari < 4.1.1 / 5.0.1 Multiple Vulnerabilities

Binary data 5617.prm...

Safari AutoFill Feature Exposes User Data

A prominent security researcher is urging users of Apple’s Safari browser to immediately turn off the AutoFill feature to block hackers from stealing sensitive information. According to Jeremiah Grossman, founder and Chief Technology Officer of WhiteHat Security, the AutoFill Web Forms feature ca...

Firefox form history vulnerable to stealing

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries...

CVE-2006-6238

The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077...

CVE-2006-6238

The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077...

CVE-2006-6238

Technical details for CVE-2006-6238 are not provided in the supplied documents. Connected sources reference related Safari issues and other CVEs but do not specify affected versions, root cause, or fixes. Monitor for updates.

CVE-2006-6238

The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077...