CVE-2003-0975

No fix known EPSS 2%

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Published 2003-12-10 · CVE record · OSV

Products: apple safari, apple mac_os_x, apple mac_os_x_server