CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
appleiphone_os
𝑥
≤ 8.4.1
applesafari
𝑥
≤ 8.0.8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qtwebkit-opensource-src
yakkety
ignored
xenial
ignored
wily
ignored
vivid
ignored
trusty
dne
precise
dne
qtwebkit-source
yakkety
ignored
xenial
ignored
wily
ignored
vivid
ignored
trusty
dne
precise
ignored
webkit
yakkety
dne
xenial
dne
wily
dne
vivid
dne
trusty
dne
precise
ignored
webkitgtk
yakkety
Fixed 2.4.10-0ubuntu1
released
xenial
Fixed 2.4.10-0ubuntu1
released
wily
Fixed 2.4.10-0ubuntu0.15.10.1
released
vivid
ignored
trusty
Fixed 2.4.10-0ubuntu0.14.04.1
released
precise
dne
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
http://lists.apple.com/archives/security-announce/2015/Sep/msg00007.html
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
http://www.securityfocus.com/bid/76766
http://www.securitytracker.com/id/1033609
http://www.ubuntu.com/usn/USN-2937-1
https://support.apple.com/HT205212
https://support.apple.com/HT205265
http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
http://lists.apple.com/archives/security-announce/2015/Sep/msg00007.html
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
http://www.securityfocus.com/bid/76766
http://www.securitytracker.com/id/1033609
http://www.ubuntu.com/usn/USN-2937-1
https://support.apple.com/HT205212
https://support.apple.com/HT205265