WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Oct 8, 2014 | Nov 26, 2010 |
| Apple Safari | — | Upgrade to Apple Safari version 5.1Upgrade to Apple Safari version 5.0.6Uninstall Apple Safari on Windows | Jan 5, 2012 | Nov 26, 2010 |
| Suse | — | Upgrade libwebkit-langUpgrade webkit-jscUpgrade libwebkit-1_0-2-32bitUpgrade libwebkit-develUpgrade libwebkit-1_0-2 | Feb 17, 2015 | Nov 26, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub