Back to feed
EUVD-2010-3808 · Published Nov 26, 2010
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
Technologies
Apple Iphone Os
Weaknesses
CWE-264
CVSS scores
- v2.05.8
AV:N/AC:M/Au:N/C:P/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
- http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://secunia.com/advisories/42314
- http://secunia.com/advisories/43068
- http://support.apple.com/kb/HT4456
Potentially impacted assets
See if this affects your attack surface
