WebKit International Domain Name URI Spoofing Vulnerability

Bugtraq ID:	36026
Class:	Input Validation Error
CVE:	CVE-2009-2199
Remote:	Yes
Local:	No
Published:	Aug 11 2009 12:00AM
Updated:	Sep 10 2009 06:11PM
Credit:	Chris Weber of Casaba Security, LLC
Vulnerable:	Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Beta Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 1.1 Apple iPod Touch 0 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 Apple iPhone 1 Apple iPhone 0
Not Vulnerable:	Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple iPod Touch 3.1.1 Apple iPhone 3.1

WebKit International Domain Name URI Spoofing Vulnerability

WebKit is affected by a URI-spoofing vulnerability because it fails to adequately handle specific characters in international domain name (IDN) domains.

An attacker may leverage this issue to spoof the source URI of a site presented to an unsuspecting user. This may lead to a false sense of trust because the user may be presented with a source URI of a trusted site while interacting with the attacker's malicious site.

Versions prior to Apple Safari 4.0.3 are vulnerable; other applications using WebKit may also be affected.

WebKit International Domain Name URI Spoofing Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web document.

WebKit International Domain Name URI Spoofing Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Safari 4.0.2 for Windows

• Apple SafariQuickTimeSetup-APPLE-SA-2009-08-11-1.exe
  Safari+QuickTime for Windows XP or Vista
  http://www.apple.com/safari/download/


• Apple SafariSetup-APPLE-SA-2009-08-11-1.exe
  Safari for Windows XP or Vista
  http://www.apple.com/safari/download/

Apple Safari 4.0.2

• Apple Safari4.0.3Leo.dmg
  Safari for Mac OS X v10.5.7 and Mac OS X v10.5.8
  http://www.apple.com/safari/download/


• Apple Safari4.0.3Ti.dmg
  Safari for Mac OS X v10.4.11
  http://www.apple.com/safari/download/

WebKit International Domain Name URI Spoofing Vulnerability

References:

• Safari Homepage (Apple)
  
• WebKit Homepage (WebKit Open Source Project)