WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a c...
Date: 2009-06
Affected: apple/safari
Attack vector: other
Category: vulnerability-disclosure
Severity: Low
CVE: CVE-2009-1710
CVSS: 2.6 ()

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property.


Mitigations:

Architectural layers (MAESTRO):