NVD

Id
45324  
Name
CVE-2012-3742  
Description
Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-20  
Modified Date
2013-03-25  
Seq
2012-3742  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227603 45324 CVE-2012-3742 APPLE-SA-2012-09-19-1  View
227604 45324 CVE-2012-3742 http://support.apple.com/kb/HT5503  View
227605 45324 CVE-2012-3742 apple-ios-safari-cve20123742(78708)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28841 JVNDB-2012-004548 Apple iOS 6 未満の Safari における https 接続に偽装される脆弱性 Apple iOS 6 未満の Safari は、Unicode 文字の使用を適切に制限しないため、https 接続に偽装される脆弱性が存在します。 CVE-2012-3742 56980 CVE-2012-3742 45324 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004548.html 2012-09-20 2012-09-24 View