CVE-2007-3742: Medium severity Apple iPhone vulnerability
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" (homographs) and possibly perform phishing attacks.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3742?
CVE-2007-3742 has a moderate severity rating due to the potential for phishing attacks using look-alike URLs.
How do I fix CVE-2007-3742?
To fix CVE-2007-3742, update Apple Safari to version 3.0.3 or later and update iPhone to version 1.0.1 or later.
Which versions of Apple Safari are affected by CVE-2007-3742?
Apple Safari versions before 3.0.3 are affected by CVE-2007-3742.
What type of attack does CVE-2007-3742 facilitate?
CVE-2007-3742 facilitates phishing attacks through the use of homograph URLs that mimic legitimate sites.
Do all versions of iPhone contain the vulnerability identified by CVE-2007-3742?
Only versions of iPhone prior to 1.0.1 are affected by CVE-2007-3742.