CVE-2008-1999

EPSS 0.52%
Published 28.04.2008 20:05:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version3.1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.52%	0.639

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://es.geocities.com/jplopezy/pruebasafari3.html

http://secunia.com/advisories/29900

Vendor Advisory

http://securityreason.com/securityalert/3833

http://www.securityfocus.com/archive/1/491192/100/0/threaded

http://www.vupen.com/english/advisories/2008/1347

https://exchange.xforce.ibmcloud.com/vulnerabilities/41981

https://nvd.nist.gov/vuln/detail/CVE-2008-1999

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1999

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1999

EUVD