Apple Safari setInterval () Address Bar Spoofing Vulnerability

Release date:
Updated on:

Affected Systems:
Apple Safari 5.1.2 (7534.52.7) For Windows
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52323
Cve id: CVE-2011-3844

Safari is the browser in Mac OS X, the latest operating system of Apple Computer. It uses KDE's KHTML as the core of browser computing.

Apple Safari has a security vulnerability in processing setInterval () functions. Remote attackers can exploit this vulnerability to show arbitrary content when a trusted site URL is displayed in the address bar and perform a spoofing attack.

<* Source: Krystian Kloskowski (h07@interia.pl)

Link: http://secunia.com/advisories/44976/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://support.apple.com/