CVE-2016-4604

Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number...

CVE-2016-4604

This CVE affects Safari on iOS (pre-9.3.3). The vulnerability allows a remote attacker to spoof the displayed URL by delivering an HTTP redirect to an invalid TCP port, enabling potential UI spoofing of the address bar. Affected product/area: Safari in iOS. Root cause: improper handling of redire...