JVN#46026251
Safari address bar spoofing vulnerability

Overview

Safari contains a vulnerability where the URL displayed in the address may be spoofed.

Products Affected

• Safari prior to 5.0
• Safari prior to 4.1

Description

Safari contains a vulnerability where the address bar displays a character string that looks like a different URL than the URL that is being accessed.

Impact

Phishing attacks may be possible, due to the difficulty in determining that the URL displayed in the address bar and the URL being accessed are different.

Solution

Update the software
Update to the latest version according to the information provided by the developer.