CVE-2008-1005: Infoleak
Published Mar 19, 2008
·Updated
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
Affected Software
16 affected components
Safari=1.3.2
Safari=3.0.4
Safari=2.0.2
Safari=3.0.1
Safari=3.0.2
Safari=1.0
Safari=1.3
Safari=3.0.3
Safari=2.0
Safari=0.8
Safari=2.0.4
Safari=1.1
Safari=1.3.1
Safari=1.2
Safari=3.0
Safari=0.9
Event History
Mar 19, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1005?
CVE-2008-1005 has a medium severity rating as it allows local attackers to read passwords.
2
How do I fix CVE-2008-1005?
To fix CVE-2008-1005, users should upgrade to a fixed version of Apple Safari that patches this vulnerability.
3
Which versions of Safari are affected by CVE-2008-1005?
CVE-2008-1005 affects multiple versions of Apple Safari, specifically those prior to version 3.1.
4
Who can exploit CVE-2008-1005?
CVE-2008-1005 can be exploited by physically proximate attackers who can access the victim's machine.
5
What are the implications of CVE-2008-1005?
The implications of CVE-2008-1005 include the potential for unauthorized password disclosure, compromising user security.