Address Bar Spoofing in ArcSearch iOS via Iframe URI Navigation

Executive Summary

This vulnerability in ArcSearch for iOS versions prior to 1.45.2 allows the address bar to display a different domain than the actual content shown after an iframe-triggered URI-scheme navigation. This mismatch increases the risk of spoofing attacks, where users might be tricked into believing they are on a legitimate site while viewing malicious content.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to spoofing attacks, potentially deceiving users into trusting malicious websites that appear legitimate due to the misleading domain shown in the address bar. This can result in users disclosing sensitive information or falling victim to phishing or other malicious activities.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update ArcSearch for iOS to version 1.45.2 or later, as versions prior to 1.45.2 are affected by the spoofing risk.

Useful 0 Not Useful 0