5

CVE-2006-6238

Exploit
The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version2.0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.35% 0.681
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/23066
Vendor Advisory
http://tearesolutions.com/2006/11/how_to_steal_passwords_from_safaris_autofill.html
Exploit
http://www.securityfocus.com/bid/21329
Exploit