CVE-2008-1005 Information

Description

WebCore as used in Apple Safari before 3.1 does not properly mask the password field when reverse conversion is used with the Kotoeri input method which allows physically proximate attackers to read the password.

Reference

http://docs.info.apple.com/article.html?artnum=307563 http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html http://secunia.com/advisories/29393 http://www.securityfocus.com/bid/28290 http://www.securityfocus.com/bid/28326 http://www.securitytracker.com/id?1019656 http://www.us-cert.gov/cas/techalerts/TA08-079A.html http://www.vupen.com/english/advisories/2008/0920/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41329