Description
Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
References
- 17813 third-party-advisory
- ADV-2005-2659 vdb-entry
- 17397 vdb-entry
- 1015294 vdb-entry
- APPLE-SA-2005-11-29 vendor-advisory
- 15474 third-party-advisory
- mozilla-javascript-dialog-box-spoofing(21070) vdb-entry
- http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
- http://secunia.com/secunia_research/2005-12/advisory/
- 14011 vdb-entry