Description
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
References
- safari-webcore-weak-security(41329) vdb-entry
- 1019656 vdb-entry
- TA08-079A third-party-advisory
- APPLE-SA-2008-03-18 vendor-advisory
- 28290 vdb-entry
- http://docs.info.apple.com/article.html?artnum=307563
- 28326 vdb-entry
- ADV-2008-0920 vdb-entry
- 29393 third-party-advisory