CERTA-2003-AVI-207
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité sur le navigateur Apple Safari permet à un utilisateur mal intentionné de récupérer un cookie présent dans le cache du navigateur.
Description
Une vulnérabilité sur le navigateur Apple Safari permet à un utilisateur mal intentionné, via une page au format html malicieusement construite envoyée par mail ou hébergée sur un site web, de récupérer le contenu d'un cookie présent dans le cache de votre navigateur.
Solution
Appliquer les correctifs disponibles sur le site d'Apple (cf section documention).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MacOS X 10.2.8 ;",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "MacOS X 10.3.1.",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 sur le navigateur Apple Safari permet \u00e0 un utilisateur\nmal intentionn\u00e9, via une page au format html malicieusement construite\nenvoy\u00e9e par mail ou h\u00e9berg\u00e9e sur un site web, de r\u00e9cup\u00e9rer le contenu\nd\u0027un cookie pr\u00e9sent dans le cache de votre navigateur.\n\n## Solution\n\nAppliquer les correctifs disponibles sur le site d\u0027Apple (cf section\ndocumention).\n",
"cves": [],
"links": [
{
"title": "Avis de s\u00e9curit\u00e9 Apple",
"url": "http://docs.info.apple.com/article.html?artnum=61798"
}
],
"reference": "CERTA-2003-AVI-207",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2003-12-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Vol de cookies"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 sur le navigateur Apple Safari permet \u00e0 un utilisateur\nmal intentionn\u00e9 de r\u00e9cup\u00e9rer un cookie pr\u00e9sent dans le cache du\nnavigateur.\n",
"title": "Vuln\u00e9rabilit\u00e9 sur le navigateur Apple Safari",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis de s\u00e9curit\u00e9 SA10252 de S\u00e9cunia",
"url": "http://www.secunia.com/advisories/10252/"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…