CVE-2009-2199
- State
- Published
- Severity
- Not scored
- Published
- Aug 12, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jun 24, 2009
Description
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 43068third-party-advisory
- APPLE-SA-2009-08-11-1vendor-advisory
- ADV-2011-0212vdb-entry
- SUSE-SR:2011:002vendor-advisory
- 1022719vdb-entry
- 36026vdb-entry
- APPLE-SA-2009-09-09-1vendor-advisory
- 36677third-party-advisory
- http://support.apple.com/kb/HT3860
- http://support.apple.com/kb/HT3733
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.