CVE-2008-1999 | BDVDB-2026-30437 Detail

Description#

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/1347
https://exchange.xforce.ibmcloud.com/vulnerabilities/41981
http://es.geocities.com/jplopezy/pruebasafari3.html
http://www.securityfocus.com/archive/1/491192/100/0/threaded
http://securityreason.com/securityalert/3833
http://secunia.com/advisories/29900

Exploit#

No public exploit known

History#

Version 12008-04-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.