NVD

Id
48270  
Name
CVE-2009-0960  
Description
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-06-19  
Modified Date
2012-03-30  
Seq
2009-0960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242753 48270 CVE-2009-0960 APPLE-SA-2009-06-17-1  View
242754 48270 CVE-2009-0960 http://support.apple.com/kb/HT3639  View
242755 48270 CVE-2009-0960 35414  View
242756 48270 CVE-2009-0960 35434  View
242757 48270 CVE-2009-0960 ADV-2009-1621  View
242758 48270 CVE-2009-0960 iphone-ipod-mail-weak-security(51209)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40842 JVNDB-2009-001848 Apple iPhone OS の Mail コンポーネントにおけるデバイスのネットワークアドレスを判別される脆弱性 Apple iPhone OS の Mail コンポーネントには、HTML 電子メール内のリモート画像を読み込まないオプションが割り当てられていないため、デバイスのネットワークアドレスを判別される脆弱性が存在します。 CVE-2009-0960 38391 CVE-2009-0960 48270 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001848.html 2009-06-19 2009-08-06 View