CVE-2005-2272: Low severity Safari vulnerability

Published Jul 13, 2005

Updated

Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

Affected Software

1 affected component

Safari=2.0

Event History

Jul 13, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is CVE-2005-2272?

CVE-2005-2272 is a vulnerability in Safari version 2.0 that allows remote attackers to spoof JavaScript dialog boxes, leading to possible phishing attacks.

What is the severity of CVE-2005-2272?

CVE-2005-2272 has been classified as a moderate severity vulnerability due to its potential for phishing attacks.

How do I fix CVE-2005-2272?

To mitigate CVE-2005-2272, users should upgrade to a newer version of Safari that addresses this vulnerability.

Which software is affected by CVE-2005-2272?

CVE-2005-2272 specifically affects Apple Safari version 2.0.

Does CVE-2005-2272 allow remote attacks?

Yes, CVE-2005-2272 enables remote attackers to spoof dialog boxes associated with trusted sites, facilitating phishing efforts.