The host is installed with Apple Safari before 4.0 and is prone to an address bar spoofing vulnerability. A flaw is present in the application, which fails to properly handle unicode ideographic spaces. Successful exploitation could allow attackers to direct the user to a spoofed site that visually appears to be a legitimate domain.