CVE-2012-0584

UNKNOWN

The Internationalized Domain Name (IDN) feature in Apple Safari before 5

Published Mar 12, 2012

Modified 1 years ago

Details

The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.

References

ADVISORY

http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html

WEB

http://osvdb.org/80088

ADVISORY

http://secunia.com/advisories/48377

WEB

http://www.securitytracker.com/id?1026785

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2012-0584

CVSS Analysis

CVSS v2.0

6.4

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

PartialA:P

6.4/AV:N/AC:L/Au:N/C:N/I:P/A:P

Ecosystems

Timeline

PublishedMar 12, 2012

ModifiedAug 6, 2024