Vulnerabilities > CVE-2012-3715 - Cryptographic Issues vulnerability in Apple Safari

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

apple

CWE-310

nessus

NVD

Published: 2012-09-20

Updated: 2024-11-21

Summary

Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address bar, which allows user-assisted remote attackers to obtain sensitive information by sniffing the network.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Safari 4.0.2 Apple Safari 3.0.4B Apple Safari 1.3.0 Apple Safari 1.0.3 Apple Safari 2.0.3 Apple Safari 5.1.3 Apple Safari 4.0.1 Apple Safari 1.3.2 Apple Safari 2 Apple Safari 1.1.1 Apple Safari 3.0.4 Apple Safari 1.2.2 Apple Safari 3.0.1 Apple Safari 2.0.1 Apple Safari 5.1.2 Apple Safari 3.2.0B Apple Safari 5.0.6 Apple Safari 5.0.1 Apple Safari 2.0.2 Apple Safari * Apple Safari 1.0.2 Apple Safari 3.0.0 Apple Safari 3.1.2B Apple Safari 3.0.2 Apple Safari 1.0 Apple Safari 3.1.0B Apple Safari 3.1.0 Apple Safari 5.0.2 Apple Safari 3.0.3B Apple Safari 3.1.1 Apple Safari - Apple Safari 1.0.0 Apple Safari 1.0.0B1 Apple Safari 1.0.0B2 Apple Safari 1.0.1 Apple Safari 1.0B1 Apple Safari 1.1 Apple Safari 1.1.0 Apple Safari 1.2 Apple Safari 1.2.0 Apple Safari 1.2.1 Apple Safari 1.2.3 Apple Safari 1.2.4 Apple Safari 1.2.5 Apple Safari 1.3 Apple Safari 1.3.1 Apple Safari 2.0 Apple Safari 2.0.0 Apple Safari 2.0.4 Apple Safari 3 Apple Safari 3.0 Apple Safari 3.0.0B Apple Safari 3.0.1B Apple Safari 3.0.2B Apple Safari 3.0.3 Apple Safari 3.0.5 Apple Safari 3.1.1B Apple Safari 3.1.2 Apple Safari 3.2.0 Apple Safari 3.2.1 Apple Safari 3.2.1B Apple Safari 3.2.2 Apple Safari 3.2.2B Apple Safari 4.0 Apple Safari 4.0.0B Apple Safari 4.0.3 Apple Safari 4.0.4 Apple Safari 4.0.5 Apple Safari 4.1 Apple Safari 4.1.1 Apple Safari 4.1.2 Apple Safari 4.1.3 Apple Safari 5.0 Apple Safari 5.0.3 Apple Safari 5.0.4 Apple Safari 5.0.5 Apple Safari 5.1 Apple Safari 5.1.1 Apple Safari 5.1.4 Apple Safari 5.1.5 Apple Safari 5.1.6 Apple Safari 5.1.7 Apple Safari 6.0	108

Common Weakness Enumeration (CWE)

CWE-310 - Cryptographic Issues

Common Attack Pattern Enumeration and Classification (CAPEC)

Signature Spoofing by Key Recreation
An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.

Nessus

NASL family	MacOS X Local Security Checks
NASL id	MACOSX_SAFARI6_0_1.NASL
description	The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0.1. It is, therefore, potentially affected by several issues : - A logic error in Safari
last seen	2020-06-01
modified	2020-06-02
plugin id	62216
published	2012-09-20
reporter	This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/62216
title	Mac OS X : Apple Safari < 6.0.1 Multiple Vulnerabilities

Seebug

bulletinFamily	exploit
description	BUGTRAQ ID: 55626 CVE ID: CVE-2012-3715 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari 6.0.1之前版本处理地址栏中的HTTPS URL时存在逻辑错误。如果通过黏贴文本编辑部分地址，请求会被通过HTTP意外发送。 0 Apple Safari 6.x 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（APPLE-SA-2012-09-19-3）以及相应补丁: APPLE-SA-2012-09-19-3：APPLE-SA-2012-09-19-3 Safari 6.0.1 链接：https://www.apple.com/support/security/pgp/
id	SSV:60397
last seen	2017-11-19
modified	2012-09-24
published	2012-09-24
reporter	Root
title	Apple Safari URL处理安全限制绕过漏洞

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

Seebug

References