Description
Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address bar, which allows user-assisted remote attackers to obtain sensitive information by sniffing the network.
References
- APPLE-SA-2012-09-19-3 vendor-advisory
- 85655 vdb-entry
- http://support.apple.com/kb/HT5502
- apple-safari-cve20123715(78680) vdb-entry
- 55626 vdb-entry