CVEvulnerability

CVE-2012-3693

5.0 MEDIUM Published 2012-07-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.

Affected configurations

• apple safari (<= 5.1.7) • apple safari 1.0 • apple safari 1.0.0 • apple safari 1.0.0b1 • apple safari 1.0.0b2 • apple safari 1.0.1 • apple safari 1.0.2 • apple safari 1.0.3 • apple safari 1.0b1 • apple safari 1.1 • apple safari 1.1.0 • apple safari 1.1.1 • apple safari 1.2 • apple safari 1.2.0 • apple safari 1.2.1 • apple safari 1.2.2 • apple safari 1.2.3 • apple safari 1.2.4 • apple safari 1.2.5 • apple safari 1.3 • apple safari 1.3.0 • apple safari 1.3.1 • apple safari 1.3.2 • apple safari 2 • apple safari 2.0 • apple safari 2.0.0 • apple safari 2.0.1 • apple safari 2.0.2 • apple safari 2.0.3 • apple safari 2.0.4 • apple safari 3 • apple safari 3.0 • apple safari 3.0.0 • apple safari 3.0.0b • apple safari 3.0.1 • apple safari 3.0.1b • apple safari 3.0.2 • apple safari 3.0.2b • apple safari 3.0.3 • apple safari 3.0.3b • apple safari 3.0.4 • apple safari 3.0.4b • apple safari 3.1.0 • apple safari 3.1.0b • apple safari 3.1.1 • apple safari 3.1.1b • apple safari 3.1.2 • apple safari 3.1.2b • apple safari 3.2.0 • apple safari 3.2.0b • apple safari 3.2.1 • apple safari 3.2.1b • apple safari 3.2.2 • apple safari 3.2.2b • apple safari 4.0 • apple safari 4.0.0b • apple safari 4.0.1 • apple safari 4.0.2 • apple safari 4.0.3 • apple safari 4.0.4 … and 17 more

References