CVE

Id
46413  
CVE No.
CVE-2010-3829  
Status
Candidate  
Description
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.  
Phase
Assigned (20101007)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
506437 46413 CVE-2010-3829 CONFIRM:http://support.apple.com/kb/HT4456  View
506438 46413 CVE-2010-3829 CONFIRM:http://support.apple.com/kb/HT4808  View
506439 46413 CVE-2010-3829 APPLE:APPLE-SA-2010-11-22-1  View
506440 46413 CVE-2010-3829 URL:http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html  View
506441 46413 CVE-2010-3829 APPLE:APPLE-SA-2011-07-20-1  View
506442 46413 CVE-2010-3829 URL:http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html  View
506443 46413 CVE-2010-3829 SUSE:SUSE-SR:2011:002  View
506444 46413 CVE-2010-3829 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
506445 46413 CVE-2010-3829 SECTRACK:1024773  View
506446 46413 CVE-2010-3829 URL:http://www.securitytracker.com/id?1024773  View
506447 46413 CVE-2010-3829 SECUNIA:42314  View
506448 46413 CVE-2010-3829 URL:http://secunia.com/advisories/42314  View
506449 46413 CVE-2010-3829 SECUNIA:43068  View
506450 46413 CVE-2010-3829 URL:http://secunia.com/advisories/43068  View
506451 46413 CVE-2010-3829 VUPEN:ADV-2010-3046  View
506452 46413 CVE-2010-3829 URL:http://www.vupen.com/english/advisories/2010/3046  View
506453 46413 CVE-2010-3829 VUPEN:ADV-2011-0212  View
506454 46413 CVE-2010-3829 URL:http://www.vupen.com/english/advisories/2011/0212  View
506455 46413 CVE-2010-3829 XF:appleios-mail-information-disclosure(63418)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36956 JVNDB-2010-002736 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL は、KILL_BAD_DATA および “CREATE TABLE … SELECT.” に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3833 46413 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002736.html  View