MEDIUM
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813
Published Nov 26, 2010
5.8
MEDIUMCVSS 2.0
EPSS 2.45%
Description
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
Affected products
No data.
OR
- ≤ 4.1
- 1.0.0
- 1.0.1
- 1.0.2
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.3
- 1.1.4
- 1.1.5
- 2.0
- 2.0.0
- 2.0.1
- 2.0.2
- 2.1
- 2.1.1
- 2.2
- 2.2.1
- 3.0
- 3.0.1
- 3.1
- 3.1.2
- 3.1.3
- 3.2
- 3.2.1
- 3.2.2
- 4.0
- 4.0.1
- 4.0.2
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (11)
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html vendor-advisoryx_refsource_APPLEVendor Advisory
- http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html vendor-advisoryx_refsource_APPLE
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/42314 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/43068 third-party-advisoryx_refsource_SECUNIA
- http://support.apple.com/kb/HT4456 x_refsource_CONFIRMVendor Advisory
- http://support.apple.com/kb/HT4808 x_refsource_CONFIRM
- http://www.securitytracker.com/id?1024773 vdb-entryx_refsource_SECTRACK
- http://www.vupen.com/english/advisories/2010/3046 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2011/0212 vdb-entryx_refsource_VUPEN
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63418 vdb-entryx_refsource_XF
| Link | Providers | Tags |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html | vendor-advisoryx_refsource_APPLEVendor Advisory | |
| http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html | vendor-advisoryx_refsource_APPLE | |
| http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html | vendor-advisoryx_refsource_SUSE | |
| http://secunia.com/advisories/42314 | third-party-advisoryx_refsource_SECUNIA | |
| http://secunia.com/advisories/43068 | third-party-advisoryx_refsource_SECUNIA | |
| http://support.apple.com/kb/HT4456 | x_refsource_CONFIRMVendor Advisory | |
| http://support.apple.com/kb/HT4808 | x_refsource_CONFIRM | |
| http://www.securitytracker.com/id?1024773 | vdb-entryx_refsource_SECTRACK | |
| http://www.vupen.com/english/advisories/2010/3046 | vdb-entryx_refsource_VUPEN | |
| http://www.vupen.com/english/advisories/2011/0212 | vdb-entryx_refsource_VUPEN | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/63418 | vdb-entryx_refsource_XF |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Nov 26, 2010
Updated Aug 7, 2024
Reserved Oct 7, 2010
Link CVE-2010-3829
CISA Vulnrichment
Updated n/a