CVE-2015-3753
16.08.2015, 23:59
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 6.0 ≤ 𝑥 < 6.2.8 |
| apple | safari | 7.0 ≤ 𝑥 < 7.1.8 |
| apple | safari | 8.0 ≤ 𝑥 < 8.0.8 |
| apple | iphone_os | 𝑥 < 8.4.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qtwebkit-opensource-src |
| ||||||||||||
| qtwebkit-source |
| ||||||||||||
| webkit |
| ||||||||||||
| webkitgtk |
|
Common Weakness Enumeration
References