CVE

Id
27099  
CVE No.
CVE-2007-3742  
Status
Candidate  
Description
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" (homographs) and possibly perform phishing attacks.  
Phase
Assigned (20070712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277247 27099 CVE-2007-3742 MISC:http://isc.sans.org/diary.html?storyid=3214  View
277248 27099 CVE-2007-3742 CONFIRM:http://docs.info.apple.com/article.html?artnum=306173  View
277249 27099 CVE-2007-3742 CONFIRM:http://docs.info.apple.com/article.html?artnum=306174  View
277250 27099 CVE-2007-3742 BID:24636  View
277251 27099 CVE-2007-3742 URL:http://www.securityfocus.com/bid/24636  View
277252 27099 CVE-2007-3742 VUPEN:ADV-2007-2730  View
277253 27099 CVE-2007-3742 URL:http://www.vupen.com/english/advisories/2007/2730  View
277254 27099 CVE-2007-3742 VUPEN:ADV-2007-2731  View
277255 27099 CVE-2007-3742 URL:http://www.vupen.com/english/advisories/2007/2731  View
277256 27099 CVE-2007-3742 SECTRACK:1018488  View
277257 27099 CVE-2007-3742 URL:http://www.securitytracker.com/id?1018488  View
277258 27099 CVE-2007-3742 SECUNIA:26287  View
277259 27099 CVE-2007-3742 URL:http://secunia.com/advisories/26287  View
277260 27099 CVE-2007-3742 XF:safari-idn-url-spoofing(35716)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53644 JVNDB-2007-002336 mDNSResponder の UPnP IGD 実装におけるヒープベースのバッファオーバーフローの脆弱性 Apple Mac OS X 上で稼働する mDNSResponder の UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) 実装には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-3744 27099 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002336.html  View