CVE

Id
91402  
CVE No.
CVE-2016-4583  
Status
Candidate  
Description
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.  
Phase
Assigned (20160511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
785303 91402 CVE-2016-4583 BUGTRAQ:20160825 WebKitGTK+ Security Advisory WSA-2016-0005  View
785304 91402 CVE-2016-4583 URL:http://www.securityfocus.com/archive/1/archive/1/539295/100/0/threaded  View
785305 91402 CVE-2016-4583 MISC:http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html  View
785306 91402 CVE-2016-4583 CONFIRM:https://support.apple.com/HT206900  View
785307 91402 CVE-2016-4583 CONFIRM:https://support.apple.com/HT206902  View
785308 91402 CVE-2016-4583 CONFIRM:https://support.apple.com/HT206905  View
785309 91402 CVE-2016-4583 APPLE:APPLE-SA-2016-07-18-2  View
785310 91402 CVE-2016-4583 URL:http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html  View
785311 91402 CVE-2016-4583 APPLE:APPLE-SA-2016-07-18-4  View
785312 91402 CVE-2016-4583 URL:http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html  View
785313 91402 CVE-2016-4583 APPLE:APPLE-SA-2016-07-18-5  View
785314 91402 CVE-2016-4583 URL:http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html  View
785315 91402 CVE-2016-4583 BID:91830  View
785316 91402 CVE-2016-4583 URL:http://www.securityfocus.com/bid/91830  View
785317 91402 CVE-2016-4583 SECTRACK:1036343  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
194 JVNDB-2016-000201 SetucoCMS におけるセッション管理不備の脆弱性 SetucoCMSプロジェクトが提供する SetucoCMS は、コンテンツ管理システム (CMS) です。SetucoCMS には、セッション管理不備の脆弱性が存在します。 CVE-2016-4896 91402 4 4.2 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000201.html  View