Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2004-0166: Safari on Mac OS X 10.2.8 can show false URLs

CVE-2004-0166 · published 22 years ago

Summary

Safari on Mac OS X 10.2.8 may display misleading web addresses in the status bar, making it hard for users to verify where a link really goes. This could let attackers trick users into clicking malicious links. Upgrade to a newer version of Safari or the operating system, or apply any available security patches to restore accurate URL display.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
apple	mac_os_x	10.2.8 `cpe:2.3:o:apple:mac_os_x:10.2.8:::::::*`
apple	mac_os_x_server	10.2.8 `cpe:2.3:o:apple:mac_os_x_server:10.2.8:::::::*`

Original advisory text

Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."

References

http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html
http://secunia.com/advisories/10959
http://www.kb.cert.org/vuls/id/194238 Patch Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/14993

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

2% chance of attack within 30 days

Timeline

Published15 Mar 2004

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2004-0166 · NVD

Track software like this

Free during beta