What’s Vulnerable › Vulnerabilities

CVE-2003-0975

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-12-15 · updated 2026-06-16

Description

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Affected products

• macOS: 10.2.8, 10.3.1
• Apple Mac Os X Server: 10.2.8, 10.3.1
• Apple Safari: 1.0, 1.1

References

• http://docs.info.apple.com/article.html?artnum=61798
• http://lists.apple.com/mhonarc/security-announce/msg00042.html
• http://marc.info/?l=bugtraq&m=106917674428552&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7973
• http://docs.info.apple.com/article.html?artnum=61798
• http://lists.apple.com/mhonarc/security-announce/msg00042.html
• http://marc.info/?l=bugtraq&m=106917674428552&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7973

Get alerted when CVE-2003-0975 or the next vulnerability affects your stack