CVE-2009-2199

Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other…

published August 12, 2009

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02590 · 85.1th percentile
Published
2009-08-12T19:00Z
EPSS history
Timeline
  • 12 AUG 19:00Z
    Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other…
    cvelistv5