CVE

Id
31122  
CVE No.
CVE-2008-1005  
Status
Candidate  
Description
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.  
Phase
Assigned (20080226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
331625 31122 CVE-2008-1005 CONFIRM:http://docs.info.apple.com/article.html?artnum=307563  View
331626 31122 CVE-2008-1005 APPLE:APPLE-SA-2008-03-18  View
331627 31122 CVE-2008-1005 URL:http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html  View
331628 31122 CVE-2008-1005 CERT:TA08-079A  View
331629 31122 CVE-2008-1005 URL:http://www.us-cert.gov/cas/techalerts/TA08-079A.html  View
331630 31122 CVE-2008-1005 BID:28326  View
331631 31122 CVE-2008-1005 URL:http://www.securityfocus.com/bid/28326  View
331632 31122 CVE-2008-1005 BID:28290  View
331633 31122 CVE-2008-1005 URL:http://www.securityfocus.com/bid/28290  View
331634 31122 CVE-2008-1005 VUPEN:ADV-2008-0920  View
331635 31122 CVE-2008-1005 URL:http://www.vupen.com/english/advisories/2008/0920/references  View
331636 31122 CVE-2008-1005 SECTRACK:1019656  View
331637 31122 CVE-2008-1005 URL:http://www.securitytracker.com/id?1019656  View
331638 31122 CVE-2008-1005 SECUNIA:29393  View
331639 31122 CVE-2008-1005 URL:http://secunia.com/advisories/29393  View
331640 31122 CVE-2008-1005 XF:safari-webcore-weak-security(41329)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45885 JVNDB-2008-001195 Apple Safari の WebCore におけるクロスサイトスクリプティングの脆弱性 Apple Safari の WebCore には、履歴オブジェクトの変更に関するクロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1009 31122 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001195.html  View