6.4

CVE-2012-0584

The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version <= 5.1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0 Update beta
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0 Update beta2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.0b1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.0b2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.3 Update 85.8
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0.3 Update 85.8.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.0b1 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.1.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2.4
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.2.5
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.3.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.3.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.3.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.3.2 Update 312.5
   Microsoft ≫ Windows
Apple ≫ Safari Version 1.3.2 Update 312.6
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.3 Update 417.8
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.3 Update 417.9
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.3 Update 417.9.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.3 Update 417.9.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version 2.0.4 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.0 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.0b
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.0b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.1 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.1 Update beta
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.1b
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.1b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.2 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.2b
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.2b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.3 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.3b
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.3b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.4 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.4b
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.0.4b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.0 Update - Edition mac
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.0b
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.0b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.1b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.1.2b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.2.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.2.0b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.2.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.2.1b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.2.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 3.2.2b Update - Edition windows
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0 Update beta
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0.0b
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.0.5
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 4.1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.0
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.0.5
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.0.6
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.1
   Microsoft ≫ Windows
Apple ≫ Safari Version 5.1.1
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.695
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:N/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
http://secunia.com/advisories/48377
http://osvdb.org/80088
http://www.securitytracker.com/id?1026785