NVD

Id
15168  
Name
CVE-2010-3829  
Description
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-11-26  
Modified Date
2011-07-22  
Seq
2010-3829  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85138 15168 CVE-2010-3829 APPLE-SA-2010-11-22-1  View
85139 15168 CVE-2010-3829 APPLE-SA-2011-07-20-1  View
85140 15168 CVE-2010-3829 SUSE-SR:2011:002  View
85141 15168 CVE-2010-3829 http://support.apple.com/kb/HT4456  View
85142 15168 CVE-2010-3829 http://support.apple.com/kb/HT4808  View
85143 15168 CVE-2010-3829 1024773  View
85144 15168 CVE-2010-3829 ADV-2010-3046  View
85145 15168 CVE-2010-3829 ADV-2011-0212  View
85146 15168 CVE-2010-3829 appleios-mail-information-disclosure(63418)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36742 JVNDB-2010-002522 Apple iOS の WebKit における Mail のリモートイメージの読み込み設定を回避される脆弱性 Apple iOS の WebKit は、HTML LINK に関する処理に不備があるため、Mail のリモートイメージの読み込み設定を回避される脆弱性が存在します。 CVE-2010-3829 46409 CVE-2010-3829 15168 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002522.html 2010-11-26 2011-07-29 View