6.4

CVE-2012-0584

The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version <= 5.1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0 Updatebeta
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0 Updatebeta2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.0
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.0b1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.0b2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.3 Update85.8
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0.3 Update85.8.1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.0b1 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.1.0
   Microsoft ≫ Windows
Apple ≫ Safari Version1.1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2.0
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2.1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2.2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2.3
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2.4
   Microsoft ≫ Windows
Apple ≫ Safari Version1.2.5
   Microsoft ≫ Windows
Apple ≫ Safari Version1.3
   Microsoft ≫ Windows
Apple ≫ Safari Version1.3.0
   Microsoft ≫ Windows
Apple ≫ Safari Version1.3.1
   Microsoft ≫ Windows
Apple ≫ Safari Version1.3.2
   Microsoft ≫ Windows
Apple ≫ Safari Version1.3.2 Update312.5
   Microsoft ≫ Windows
Apple ≫ Safari Version1.3.2 Update312.6
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.0
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.3 Update417.8
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.3 Update417.9
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.3 Update417.9.2
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.3 Update417.9.3
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version2.0.4 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.0
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.0 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.0b
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.0b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.1 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.1 Updatebeta
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.1b
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.1b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.2 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.2b
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.2b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.3 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.3b
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.3b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.4 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.4b
   Microsoft ≫ Windows
Apple ≫ Safari Version3.0.4b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.0
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.0 Update- Editionmac
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.0b
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.0b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.1b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version3.1.2b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.2.0
   Microsoft ≫ Windows
Apple ≫ Safari Version3.2.0b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.2.1
   Microsoft ≫ Windows
Apple ≫ Safari Version3.2.1b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version3.2.2
   Microsoft ≫ Windows
Apple ≫ Safari Version3.2.2b Update- Editionwindows
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0 Updatebeta
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0.0b
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0.3
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version4.0.5
   Microsoft ≫ Windows
Apple ≫ Safari Version4.1
   Microsoft ≫ Windows
Apple ≫ Safari Version4.1.1
   Microsoft ≫ Windows
Apple ≫ Safari Version4.1.2
   Microsoft ≫ Windows
Apple ≫ Safari Version5.0
   Microsoft ≫ Windows
Apple ≫ Safari Version5.0.1
   Microsoft ≫ Windows
Apple ≫ Safari Version5.0.2
   Microsoft ≫ Windows
Apple ≫ Safari Version5.0.4
   Microsoft ≫ Windows
Apple ≫ Safari Version5.0.5
   Microsoft ≫ Windows
Apple ≫ Safari Version5.0.6
   Microsoft ≫ Windows
Apple ≫ Safari Version5.1
   Microsoft ≫ Windows
Apple ≫ Safari Version5.1.1
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.42% 0.694
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:N/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
http://secunia.com/advisories/48377
http://osvdb.org/80088
http://www.securitytracker.com/id?1026785