Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote malicious users to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple safari 2.0 |