PT-2008-2607 · Apple · Safari

Publicado 2008-03-19 · Atualizado 2017-08-08 · CVE-2008-1005

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 3.1

Description The issue concerns the WebCore component in Apple Safari, where it fails to properly mask the password field when using the Kotoeri input method with reverse conversion. This allows physically proximate attackers to read the password.

Recommendations For versions prior to 3.1, update to version 3.1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-1005

Produtos afetados

Safari

Referências · 10

• http://securityfocus.com/bid/28326 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1005 · Nota de Segurança
• http://securitytracker.com/id?1019656 · Nota
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html · Aviso do Fabricante
• http://docs.info.apple.com/article.html?artnum=307563 · Nota
• http://securityfocus.com/bid/28290 · Nota
• http://vupen.com/english/advisories/2008/0920/references · Nota
• http://secunia.com/advisories/29393 · Nota
• http://us-cert.gov/cas/techalerts/TA08-079A.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41329 · Nota