CVE

Id
91409  
CVE No.
CVE-2016-4590  
Status
Candidate  
Description
WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.  
Phase
Assigned (20160511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
785387 91409 CVE-2016-4590 BUGTRAQ:20160825 WebKitGTK+ Security Advisory WSA-2016-0005  View
785388 91409 CVE-2016-4590 URL:http://www.securityfocus.com/archive/1/archive/1/539295/100/0/threaded  View
785389 91409 CVE-2016-4590 MISC:http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html  View
785390 91409 CVE-2016-4590 CONFIRM:https://support.apple.com/HT206900  View
785391 91409 CVE-2016-4590 CONFIRM:https://support.apple.com/HT206902  View
785392 91409 CVE-2016-4590 APPLE:APPLE-SA-2016-07-18-2  View
785393 91409 CVE-2016-4590 URL:http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html  View
785394 91409 CVE-2016-4590 APPLE:APPLE-SA-2016-07-18-5  View
785395 91409 CVE-2016-4590 URL:http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html  View
785396 91409 CVE-2016-4590 BID:91835  View
785397 91409 CVE-2016-4590 URL:http://www.securityfocus.com/bid/91835  View
785398 91409 CVE-2016-4590 SECTRACK:1036343  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
198 JVNDB-2016-000208 WordPress 用プラグイン WP-OliveCart におけるクロスサイトスクリプティングの脆弱性 オリーブデザインが提供する WP-OliveCart は、ショッピングサイトを構築するための WordPress 用プラグインです。WP-OliveCart には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-4903 91409 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000208.html  View