Description
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
References
- APPLE-SA-2015-04-08-3 vendor-advisory
- APPLE-SA-2015-03-17-1 vendor-advisory
- 1031936 vdb-entry
- https://support.apple.com/HT204560
- https://support.apple.com/HT204661