CVE-2003-0975: Medium severity Apple Safari vulnerability
Published Dec 10, 2003
·Updated
Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Affected Software
6 affected components
Apple Safari=1.0
Apple Safari=1.1
Apple iOS and macOS=10.2.8
Apple iOS and macOS=10.3.1
Apple Mac OS X Server=10.3.1
Apple Mac OS X Server=10.2.8
Event History
Dec 10, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Dec 15, 2003
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0975?
CVE-2003-0975 is considered a high severity vulnerability due to the potential for cookie theft.
2
How do I fix CVE-2003-0975?
To mitigate CVE-2003-0975, users should update to a newer version of Apple Safari beyond 1.1.
3
What versions are affected by CVE-2003-0975?
CVE-2003-0975 affects Apple Safari versions 1.0 and 1.1 as well as Mac OS X versions 10.2.8 and 10.3.1.
4
What kind of attack does CVE-2003-0975 enable?
CVE-2003-0975 enables remote attackers to steal user cookies from another domain.
5
Is there a workaround for CVE-2003-0975?
A temporary workaround for CVE-2003-0975 is to avoid using vulnerable versions of Safari and to employ different web browsers.