CVE-2008-1999

EPSS 0.52%
Veröffentlicht 28.04.2008 20:05:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version3.1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.52%	0.639

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://es.geocities.com/jplopezy/pruebasafari3.html

http://secunia.com/advisories/29900

Vendor Advisory

http://securityreason.com/securityalert/3833

http://www.securityfocus.com/archive/1/491192/100/0/threaded

http://www.vupen.com/english/advisories/2008/1347

https://exchange.xforce.ibmcloud.com/vulnerabilities/41981

https://nvd.nist.gov/vuln/detail/CVE-2008-1999

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1999

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1999

EUVD