cbcvebase.
CVE-2012-3693
published 2012-07-25

CVE-2012-3693: Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing…

PriorityP421medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.24%
66.2th percentile
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.

Affected

77 ranges· showing 25
VendorProductVersion rangeFixed in
applesafari<= 5.1.7—
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.