CVE-2012-3742

CVE-2012-3742 is a medium-severity vulnerability in Apple Iphone Os with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-264.

Key facts

Description

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.

Frequently asked questions

What is CVE-2012-3742?
Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.
How severe is CVE-2012-3742?
CVE-2012-3742 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2012-3742 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (77th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2012-3742?
CVE-2012-3742 primarily affects Apple Iphone Os. In total, 40 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2012-3742?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2012-3742 published?
CVE-2012-3742 was published on 2012-09-20 and last updated on 2026-06-16.

References

Affected products (40)

More vulnerabilities in Apple Iphone Os

All CVEs affecting Apple Iphone Os →

Other CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities

Browse all CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities →