CVE-2005-4678: Medium severity Safari vulnerability

Published Dec 31, 2005

Updated

Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Safari=2.0.2

Event History

Dec 31, 2005

CVE Published

05:00 AM

Feb 1, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4678?

CVE-2005-4678 has a medium severity rating due to its potential to enable phishing attacks.

How do I fix CVE-2005-4678?

To mitigate CVE-2005-4678, users should upgrade to a newer version of Safari that addresses this vulnerability.

What are the potential impacts of CVE-2005-4678?

CVE-2005-4678 can lead to phishing scams by spoofing URL information in the Safari browser.

Which versions of Safari are affected by CVE-2005-4678?

CVE-2005-4678 specifically affects Apple Safari version 2.0.2.

How does CVE-2005-4678 exploit the Safari browser?

CVE-2005-4678 exploits the Safari browser by allowing attackers to spoof URL information in the status bar using an image title.