Apple Safari Bugs Let Remote Users Spoof the URL Address Bar, Bypass Cookie Restrictions, and Obtain Authentication Information
|
|
SecurityTracker Alert ID: 1026785 |
|
SecurityTracker URL: http://securitytracker.com/id/1026785
|
|
CVE Reference:
CVE-2012-0584, CVE-2012-0640, CVE-2012-0647
(Links to External Site)
|
Date: Mar 12 2012
|
Impact:
Disclosure of authentication information, Modification of system information
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 5.1.4
|
Description:
Several vulnerabilities were reported in Apple Safari. A remote user can spoof URLs. A remote user can bypass cookie restrictions. A remote user can obtain HTTP authentication credentials.
A remote user can create a specially crafted URL containing International Domain Name (IDN) characters to load a spoofed site that appears to have an arbitrary URL in the address bar [CVE-2012-0584]. Only Windows-based systems are affected. Matt Cooley of Symantec reported this vulnerability.
A remote 3rd-party web site can set a cookie even if the browser is configured to block 3rd-party cookies [CVE-2012-0640]. nshah reported this vulnerability.
When a remote site uses HTTP authentication and redirects to another site, the HTTP authentication credentials may be sent to the other site [CVE-2012-0647]. An anonymous researcher reported this vulnerability.
|
Impact:
A remote user can spoof URLs.
A remote user can bypass cookie restrictions.
A remote user can obtain HTTP authentication credentials in certain cases.
|
Solution:
The vendor has issued a fix (5.1.4).
The vendor's advisory will be available at:
http://support.apple.com/kb/HT1222
|
Vendor URL: support.apple.com/kb/HT1222 (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
UNIX (OS X), Windows (7), Windows (Vista), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Mon, 12 Mar 2012 18:28:19 +0000
Subject: Apple Safari
|
Excerpt from APPLE-SA-2012-03-12-1 Safari 5.1.4
Safari
Available for: Windows 7, Vista, XP SP2 or later
Impact: Look-alike characters in a URL could be used to masquerade a
website
Description: The International Domain Name (IDN) support in Safari
could be used to create a URL which contains look-alike characters.
These could be used in a malicious web site to direct the user to a
spoofed site that visually appears to be a legitimate domain. This
issue is addressed through an improved domain name validity check.
This issue does not affect OS X systems.
CVE-ID
CVE-2012-0584 : Matt Cooley of Symantec
WebKit
Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8,
OS X Lion v10.7.3, OS X Lion Server v10.7.3, Windows 7, Vista,
XP SP2 or later
Impact: Cookies may be set by third-party sites, even when Safari is
configured to block them
Description: An issue existed in the enforcement of its cookie
policy. Third-party websites could set cookies if the "Block Cookies"
preference in Safari was set to the default setting of "From third
parties and advertisers".
CVE-ID
CVE-2012-0640 : nshah
WebKit
Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8,
OS X Lion v10.7.3, OS X Lion Server v10.7.3, Windows 7, Vista,
XP SP2 or later
Impact: HTTP authentication credentials may be inadvertently
disclosed to another site
Description: If a site uses HTTP authentication and redirects to
another site, the authentication credentials may be sent to the other
site.
CVE-ID
CVE-2012-0647 : an anonymous researcher
|
|
