medium5.0Public exploit code
CVE-2004-1121
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation2004-11-01 · remote · osx · Verified
Impact
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | Versions 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
- http://secunia.com/advisories/13047/
- http://www.kb.cert.org/vuls/id/925430
- http://www.securityfocus.com/bid/11573
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17909
- http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html
- http://secunia.com/advisories/13047/
- http://www.kb.cert.org/vuls/id/925430
- http://www.securityfocus.com/bid/11573
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17909