PT-2016-6111 · Apple · Safari

Daniel Chatfield · Publicado 2016-09-25 · Atualizado 2017-07-30 · CVE-2016-4751

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 10

Description The issue allows remote attackers to spoof the address bar of a tab via a crafted web site. This can lead to phishing attacks or other malicious activities where the user is misled about the actual website they are visiting.

Recommendations For versions prior to 10, update to version 10 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2016-4751

Produtos afetados

Safari

Referências · 6

• http://securityfocus.com/bid/93058 · Nota
• https://osv.dev/vulnerability/CVE-2016-4751 · Aviso do Fabricante
• https://support.apple.com/HT207157 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4751 · Nota de Segurança
• http://securitytracker.com/id/1036854 · Nota