CVE-2003-0975 Other in n/a

Medium 5.0 Published Updated

Remote attackers can steal user cookies from another domain by tricking users into clicking a link containing a hex-encoded null character.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2003-0975?

CVE-2003-0975 is a medium-severity vulnerability in Apple Mac Os X, published on 10 Dec 2003. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Which versions are affected by CVE-2003-0975?

It affects 3 products.

Products include Apple Mac Os X, Apple Mac Os X Server, Apple Safari.

How do I fix CVE-2003-0975?

No fix has been published for CVE-2003-0975 yet. Limit exposure of the affected software until one is available.

Is CVE-2003-0975 being exploited?

There is no known exploitation of CVE-2003-0975 in the wild and no public exploit code.

All Apple Mac Os X vulnerabilities

Sources

Also known as GHSA-9m5j-6ggm-478v.

Is CVE-2003-0975 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free