CVE

Id
81030  
CVE No.
CVE-2015-3753  
Status
Candidate  
Description
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource.  
Phase
Assigned (20150507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
730666 81030 CVE-2015-3753 CONFIRM:https://support.apple.com/kb/HT205030  View
730667 81030 CVE-2015-3753 CONFIRM:https://support.apple.com/kb/HT205033  View
730668 81030 CVE-2015-3753 APPLE:APPLE-SA-2015-08-13-1  View
730669 81030 CVE-2015-3753 URL:http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html  View
730670 81030 CVE-2015-3753 APPLE:APPLE-SA-2015-08-13-3  View
730671 81030 CVE-2015-3753 URL:http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html  View
730672 81030 CVE-2015-3753 BID:76341  View
730673 81030 CVE-2015-3753 URL:http://www.securityfocus.com/bid/76341  View
730674 81030 CVE-2015-3753 SECTRACK:1033274  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8922 JVNDB-2015-004242 Apple iOS および OS X におけるコード署名の保護メカニズムを回避される脆弱性 Apple iOS および OS X には、コード署名の保護メカニズムを回避される脆弱性が存在します。 CVE-2015-3805 81030 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004242.html  View