CVE-2005-2272 Other in n/a

Low 2.6 Published 13 Jul 2005 Updated 7 Aug 2024

Remote attackers can spoof JavaScript dialog origins in Safari, facilitating phishing attacks by misleading users about the source of prompts.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2005-2272?

CVE-2005-2272 is a low-severity vulnerability in Apple Safari, published on 13 Jul 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

Which versions are affected by CVE-2005-2272?

It affects 1 product.

Products include Apple Safari.

How do I fix CVE-2005-2272?

No fix has been published for CVE-2005-2272 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-2272 being exploited?

There is no known exploitation of CVE-2005-2272 in the wild and no public exploit code.

All Apple Safari vulnerabilities

Sources

Also known as CVE-2005-3703, GHSA-mg99-c4x5-8x7h.