Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2016-1781

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.

VectorNETWORK

PublishedMar 24, 2016, 01:59

Published Byproduct-security@apple.com

Base Score

Score4.3

Affected Versions

No affected versions found.

References

http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
http://www.securityfocus.com/archive/1/537948/100/0/threaded
http://www.securitytracker.com/id/1035353
https://support.apple.com/HT205635
https://support.apple.com/HT205639

Weakness Type

CWE-19

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK