CVE-2004-1121 : Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displaye

Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.

Published 2004-11-01 05:00:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2004-1121

Apple » Safari » Version: 1.0
cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*
Matching versions
Apple » Safari » Version: 1.1
cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*
Matching versions
Apple » Safari » Version: 1.2.2
cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*
Matching versions
Apple » Safari » Version: 1.2.3
cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*
Matching versions
Apple » Safari » Version: 1.2
cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*
Matching versions
Apple » Safari » Version: 1.2.1
cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

3.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

https://exchange.xforce.ibmcloud.com/vulnerabilities/17909

Microsoft Internet Explorer table status bar spoofing CVE-2005-4679 Vulnerability Report
http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html

Patch;Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/11573

Exploit;Patch;Vendor Advisory
http://secunia.com/advisories/13047/

Patch;Vendor Advisory
http://www.kb.cert.org/vuls/id/925430

VU#925430 - Multiple web browsers do not properly interpret TABLE elements when displaying URLs in the status bar
Patch;Third Party Advisory;US Government Resource

Jump to