5

CVE-2012-3693

Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version <= 5.1.7
Apple ≫ Safari Version1.0
Apple ≫ Safari Version1.0 Updatebeta
Apple ≫ Safari Version1.0 Updatebeta2
Apple ≫ Safari Version1.0.0
Apple ≫ Safari Version1.0.0b1
Apple ≫ Safari Version1.0.0b2
Apple ≫ Safari Version1.0.1
Apple ≫ Safari Version1.0.2
Apple ≫ Safari Version1.0.3
Apple ≫ Safari Version1.0.3 Update85.8
Apple ≫ Safari Version1.0.3 Update85.8.1
Apple ≫ Safari Version1.0b1 Update- Editionmac
Apple ≫ Safari Version1.1
Apple ≫ Safari Version1.1.0
Apple ≫ Safari Version1.1.1
Apple ≫ Safari Version1.2
Apple ≫ Safari Version1.2.0
Apple ≫ Safari Version1.2.1
Apple ≫ Safari Version1.2.2
Apple ≫ Safari Version1.2.3
Apple ≫ Safari Version1.2.4
Apple ≫ Safari Version1.2.5
Apple ≫ Safari Version1.3
Apple ≫ Safari Version1.3.0
Apple ≫ Safari Version1.3.1
Apple ≫ Safari Version1.3.2
Apple ≫ Safari Version1.3.2 Update312.5
Apple ≫ Safari Version1.3.2 Update312.6
Apple ≫ Safari Version2
Apple ≫ Safari Version2.0
Apple ≫ Safari Version2.0.0
Apple ≫ Safari Version2.0.1
Apple ≫ Safari Version2.0.2
Apple ≫ Safari Version2.0.3
Apple ≫ Safari Version2.0.3 Update417.8
Apple ≫ Safari Version2.0.3 Update417.9
Apple ≫ Safari Version2.0.3 Update417.9.2
Apple ≫ Safari Version2.0.3 Update417.9.3
Apple ≫ Safari Version2.0.4
Apple ≫ Safari Version2.0.4 Update- Editionmac
Apple ≫ Safari Version3
Apple ≫ Safari Version3.0
Apple ≫ Safari Version3.0.0
Apple ≫ Safari Version3.0.0 Update- Editionmac
Apple ≫ Safari Version3.0.0b
Apple ≫ Safari Version3.0.0b Update- Editionwindows
Apple ≫ Safari Version3.0.1
Apple ≫ Safari Version3.0.1 Update- Editionmac
Apple ≫ Safari Version3.0.1 Updatebeta
Apple ≫ Safari Version3.0.1b
Apple ≫ Safari Version3.0.1b Update- Editionwindows
Apple ≫ Safari Version3.0.2
Apple ≫ Safari Version3.0.2 Update- Editionmac
Apple ≫ Safari Version3.0.2b
Apple ≫ Safari Version3.0.2b Update- Editionwindows
Apple ≫ Safari Version3.0.3
Apple ≫ Safari Version3.0.3 Update- Editionmac
Apple ≫ Safari Version3.0.3b
Apple ≫ Safari Version3.0.3b Update- Editionwindows
Apple ≫ Safari Version3.0.4
Apple ≫ Safari Version3.0.4 Update- Editionmac
Apple ≫ Safari Version3.0.4b
Apple ≫ Safari Version3.0.4b Update- Editionwindows
Apple ≫ Safari Version3.1.0
Apple ≫ Safari Version3.1.0 Update- Editionmac
Apple ≫ Safari Version3.1.0b
Apple ≫ Safari Version3.1.0b Update- Editionwindows
Apple ≫ Safari Version3.1.1
Apple ≫ Safari Version3.1.1b Update- Editionwindows
Apple ≫ Safari Version3.1.2
Apple ≫ Safari Version3.1.2b Update- Editionwindows
Apple ≫ Safari Version3.2.0
Apple ≫ Safari Version3.2.0b Update- Editionwindows
Apple ≫ Safari Version3.2.1
Apple ≫ Safari Version3.2.1b Update- Editionwindows
Apple ≫ Safari Version3.2.2
Apple ≫ Safari Version3.2.2b Update- Editionwindows
Apple ≫ Safari Version4.0
Apple ≫ Safari Version4.0 Updatebeta
Apple ≫ Safari Version4.0.0b
Apple ≫ Safari Version4.0.1
Apple ≫ Safari Version4.0.2
Apple ≫ Safari Version4.0.3
Apple ≫ Safari Version4.0.4
Apple ≫ Safari Version4.0.5
Apple ≫ Safari Version4.1
Apple ≫ Safari Version4.1.1
Apple ≫ Safari Version4.1.2
Apple ≫ Safari Version5.0
Apple ≫ Safari Version5.0.1
Apple ≫ Safari Version5.0.2
Apple ≫ Safari Version5.0.4
Apple ≫ Safari Version5.0.5
Apple ≫ Safari Version5.0.6
Apple ≫ Safari Version5.1
Apple ≫ Safari Version5.1.1
Apple ≫ Safari Version5.1.2
Apple ≫ Safari Version5.1.3
Apple ≫ Safari Version5.1.4
Apple ≫ Safari Version5.1.5
Apple ≫ Safari Version5.1.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.24% 0.653
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://support.apple.com/kb/HT5503
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
Vendor Advisory
http://support.apple.com/kb/HT5400
Vendor Advisory