Description
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL.
References
- APPLE-SA-2009-06-08-1 vendor-advisory
- 30186 vdb-entry
- ADV-2009-1522 vdb-entry
- 35379 third-party-advisory
- ipod-iphone-addressbar-spoofing(43732) vdb-entry
- APPLE-SA-2008-07-11 vendor-advisory
- ADV-2008-2094 vdb-entry
- http://support.apple.com/kb/HT3613
- 31074 third-party-advisory