Apple Safari APPLE-SA-2017-05-15-7 Multiple Address Bar Spoofing Vulnerabilities
BID:98470
Info
Apple Safari APPLE-SA-2017-05-15-7 Multiple Address Bar Spoofing Vulnerabilities
| Bugtraq ID: | 98470 |
| Class: | Unknown |
| CVE: |
CVE-2017-2511 CVE-2017-2500 |
| Remote: | Yes |
| Local: | No |
| Published: | May 15 2017 12:00AM |
| Updated: | May 15 2017 12:00AM |
| Credit: | Zhiyang Zeng and Yuyang Zhou of Tencent Security Platform Department. |
| Vulnerable: |
Apple Safari 10.0.1 Apple Safari 9.1.3 Apple Safari 9.1.2 Apple Safari 9.1.1 Apple Safari 9.0.3 Apple Safari 9.0.2 Apple Safari 9.0.1 Apple Safari 8.0.8 Apple Safari 8.0.6 Apple Safari 8.0.5 Apple Safari 8.0.4 Apple Safari 8.0.1 Apple Safari 7.1.8 Apple Safari 7.1.6 Apple Safari 7.1.5 Apple Safari 7.1.4 Apple Safari 7.1.1 Apple Safari 7.1 Apple Safari 7.0.6 Apple Safari 7.0.3 Apple Safari 7.0.1 Apple Safari 6.2.8 Apple Safari 6.2.6 Apple Safari 6.2.5 Apple Safari 6.2.4 Apple Safari 6.2.1 Apple Safari 6.1.6 Apple Safari 6.1.3 Apple Safari 6.1.1 Apple Safari 6.0.5 Apple Safari 6.0.4 Apple Safari 6.0.3 Apple Safari 6.0.2 Apple Safari 6.0.1 Apple Safari 5.1.10 Apple Safari 5.1.6 Apple Safari 5.1.5 Apple Safari 5.0.6 Apple Safari 4.0.5 Apple Safari 4.0.4 Apple Safari 4.0.3 Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 Apple Safari 3.1.2 Apple Safari 3.1.1 Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 1.3.2 Apple Safari 1.3.1 Apple Safari 1.3 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 Apple Safari 1.1 Apple Safari 1.0 Apple Safari 9.1 Apple Safari 9 Apple Safari 8.0.7 Apple Safari 8.0.3 Apple Safari 8.0.2 Apple Safari 8.0 Apple Safari 7.1.7 Apple Safari 7.1.3 Apple Safari 7.1.2 Apple Safari 7.1 Apple Safari 7.0.5 Apple Safari 7.0.4 Apple Safari 7.0.2 Apple Safari 6.2.7 Apple Safari 6.2.3 Apple Safari 6.2.2 Apple Safari 6.2 Apple Safari 6.1.5 Apple Safari 6.1.4 Apple Safari 6.1.2 Apple Safari 6.1 Apple Safari 6.0 Apple Safari 5.34 Apple Safari 5.33 Apple Safari 5.31 Apple Safari 5.1.7 Apple Safari 5.1.4 Apple Safari 5.1.3 Apple Safari 5.1.2 Apple Safari 5.1.1 Apple Safari 5.1 Apple Safari 5.0.5 Apple Safari 5.0.4 Apple Safari 5.0.3 Apple Safari 5.0.2 Apple Safari 5.0.1 Apple Safari 5.0 Apple Safari 4.31 Apple Safari 4.30 Apple Safari 4.28 Apple Safari 4.1.3 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4.0 Apple Safari 4 Apple Safari 3.52 Apple Safari 3.2 Apple Safari 3.1 Apple Safari 3 Apple Safari 10.1 Apple Safari 10.0.2 Apple Safari 10 |
| Not Vulnerable: |
Apple Safari 10.1.1 |
Discussion
Apple Safari APPLE-SA-2017-05-15-7 Multiple Address Bar Spoofing Vulnerabilities
Apple Safari is prone to is prone to multiple address bar spoofing vulnerabilities.
An attacker may exploit these vulnerabilities to spoof the originating URL of a trusted web site. These issues may allow a remote attacker to carry out phishing-style attacks.
Versions prior to Safari 10.1.1 are vulnerable.
Apple Safari is prone to is prone to multiple address bar spoofing vulnerabilities.
An attacker may exploit these vulnerabilities to spoof the originating URL of a trusted web site. These issues may allow a remote attacker to carry out phishing-style attacks.
Versions prior to Safari 10.1.1 are vulnerable.
Exploit / POC
Apple Safari APPLE-SA-2017-05-15-7 Multiple Address Bar Spoofing Vulnerabilities
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Apple Safari APPLE-SA-2017-05-15-7 Multiple Address Bar Spoofing Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Apple Safari APPLE-SA-2017-05-15-7 Multiple Address Bar Spoofing Vulnerabilities
References:
References:
- Apple Home Page (Apple)
- Apple Safari Homepage (Apple)