MEDIUM
WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document
Published Jun 22, 2010
6.4
MEDIUMCVSS 2.0
EPSS 3.64%
Description
WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (1)
References (10)
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://secunia.com/advisories/42314 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/43068 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://support.apple.com/kb/HT4225 x_refsource_CONFIRMVendor Advisory
- http://support.apple.com/kb/HT4456 x_refsource_CONFIRMVendor Advisory
- http://www.securityfocus.com/bid/41016 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/41068 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2011/0212 vdb-entryx_refsource_VUPENThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html | vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory | |
| http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html | vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://secunia.com/advisories/42314 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://secunia.com/advisories/43068 | third-party-advisoryx_refsource_SECUNIAThird Party Advisory | |
| http://support.apple.com/kb/HT4225 | x_refsource_CONFIRMVendor Advisory | |
| http://support.apple.com/kb/HT4456 | x_refsource_CONFIRMVendor Advisory | |
| http://www.securityfocus.com/bid/41016 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.securityfocus.com/bid/41068 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.vupen.com/english/advisories/2011/0212 | vdb-entryx_refsource_VUPENThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Jun 22, 2010
Updated Aug 7, 2024
Reserved May 6, 2010
Link CVE-2010-1757
CISA Vulnrichment
Updated n/a