CVE-2008-1005

N/A Unknown

Published: March 19, 2008 Modified: April 23, 2026

Description

WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://docs.info.apple.com/article.html?artnum=307563

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html

Source: cve@mitre.org

http://secunia.com/advisories/29393

Source: cve@mitre.org

http://www.securityfocus.com/bid/28290

Source: cve@mitre.org

http://www.securityfocus.com/bid/28326

Source: cve@mitre.org

http://www.securitytracker.com/id?1019656

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-079A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/0920/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41329

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307563