Test ID:	1.3.6.1.4.1.25623.1.0.902215
Category:	General
Title:	Apple Safari Address Bar Spoofing Vulnerability (Ju 2010) - Windows
Summary:	Apple Safari is prone to spoofing vulnerability.
Description:	Summary: Apple Safari is prone to spoofing vulnerability. Vulnerability Insight: The flaw is due to an error in handling of address bar, which does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content. Vulnerability Impact: Successful exploitation will let attackers to conduct spoofing attacks via a crafted HTML document. Affected Software/OS: Apple Safari version 5.0(5.33.16.0) and prior on Windows. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2454 http://lcamtuf.blogspot.com/2010/06/yeah-about-that-address-bar-thing.html https://bugzilla.mozilla.org/show_bug.cgi?id=556957 XForce ISS Database: safari-html-spoofing(59830) https://exchange.xforce.ibmcloud.com/vulnerabilities/59830
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.