Description
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
References
- ipod-iphone-certificate-info-disclosure(43734) vdb-entry
- 30186 vdb-entry
- JVN#88676089 third-party-advisory
- APPLE-SA-2008-07-11 vendor-advisory
- ADV-2008-2094 vdb-entry
- JVNDB-2008-000039 third-party-advisory
- 31074 third-party-advisory