CVE-2005-2272 - Vulnerability Details - OpenCVE

Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Apple	Safari

Configuration 1 [-]

cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://docs.info.apple.com/article.html?artnum=302847
http://secunia.com/advisories/15474
http://secunia.com/advisories/17813
http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
http://secunia.com/secunia_research/2005-12/advisory/
http://securitytracker.com/id?1015294
http://www.osvdb.org/17397
http://www.securityfocus.com/bid/14011
http://www.vupen.com/english/advisories/2005/2659
https://exchange.xforce.ibmcloud.com/vulnerabilities/21070

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-07-13T04:00:00

Updated: 2024-08-07T22:22:48.868Z

Reserved: 2005-07-13T00:00:00

Link: CVE-2005-2272

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-07-13T04:00:00.000

Modified: 2024-11-20T23:59:11.033

Link: CVE-2005-2272

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-06-21T00:00:00", "descriptions": [{"lang": "en", "value": "Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "17813", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17813"}, {"name": "ADV-2005-2659", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2659"}, {"name": "17397", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/17397"}, {"name": "1015294", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015294"}, {"name": "APPLE-SA-2005-11-29", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://docs.info.apple.com/article.html?artnum=302847"}, {"name": "15474", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/15474"}, {"name": "mozilla-javascript-dialog-box-spoofing(21070)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2005-12/advisory/"}, {"name": "14011", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/14011"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-2272", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "17813", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17813"}, {"name": "ADV-2005-2659", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2659"}, {"name": "17397", "refsource": "OSVDB", "url": "http://www.osvdb.org/17397"}, {"name": "1015294", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015294"}, {"name": "APPLE-SA-2005-11-29", "refsource": "APPLE", "url": "http://docs.info.apple.com/article.html?artnum=302847"}, {"name": "15474", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/15474"}, {"name": "mozilla-javascript-dialog-box-spoofing(21070)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070"}, {"name": "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/", "refsource": "MISC", "url": "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/"}, {"name": "http://secunia.com/secunia_research/2005-12/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2005-12/advisory/"}, {"name": "14011", "refsource": "BID", "url": "http://www.securityfocus.com/bid/14011"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T22:22:48.868Z"}, "title": "CVE Program Container", "references": [{"name": "17813", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17813"}, {"name": "ADV-2005-2659", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2659"}, {"name": "17397", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/17397"}, {"name": "1015294", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015294"}, {"name": "APPLE-SA-2005-11-29", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://docs.info.apple.com/article.html?artnum=302847"}, {"name": "15474", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/15474"}, {"name": "mozilla-javascript-dialog-box-spoofing(21070)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2005-12/advisory/"}, {"name": "14011", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/14011"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-2272", "datePublished": "2005-07-13T04:00:00", "dateReserved": "2005-07-13T00:00:00", "dateUpdated": "2024-08-07T22:22:48.868Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "9D3889ED-9329-4C84-A173-2553BEAE3EDA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the \"Dialog Origin Spoofing Vulnerability.\""}], "id": "CVE-2005-2272", "lastModified": "2024-11-20T23:59:11.033", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2005-07-13T04:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://docs.info.apple.com/article.html?artnum=302847"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/15474"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17813"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/secunia_research/2005-12/advisory/"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015294"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/17397"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/14011"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/2659"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://docs.info.apple.com/article.html?artnum=302847"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/15474"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17813"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/secunia_research/2005-12/advisory/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015294"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/17397"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/14011"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/2659"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21070"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}