Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2012-3689 | Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: apple
Published:
Updated: 2024-08-06T20:13:51.632Z
Reserved: 2012-06-19T00:00:00
Link: CVE-2012-3742
No data.
Status : Deferred
Published: 2012-09-20T21:55:04.377
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-3742
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD