CVE-2012-3742

Published Sep 20, 2012 CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Description
Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-3689 Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 8:13 PM
Reserved
Jun 19, 2012, 12:00 AM
Status
Modified
Published
Sep 20, 2012, 9:55 PM
Modified
Jun 16, 2026, 11:43 PM