CVE-2015-5788 — Sensitive Information Exposure in Apple Iphone OS

CWE-200 — Sensitive Information Exposure6 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
WebkitgtkApple Iphone OSApple Safari+2 more
Timeline
PublishedSep 18
Latest updateMay 17

Description

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages5 packages

▶Ubuntuwebkitgtk/webkitgtk< 2.4.10-0ubuntu0.14.04.1+1
▶NVDapple/safari8.0.8
▶NVDapple/iphone_os8.4.1
▶Appleapple/ios_9

🔴Vulnerability Details

2
GHSA
GHSA-5xmp-7ffx-qqff: The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information↗2022-05-17
▶
OSV
CVE-2015-5788: The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information↗2015-09-18
▶

📋Vendor Advisories

3
Ubuntu
WebKitGTK+ vulnerabilities↗2016-03-21
▶
Apple
CVE-2015-5788: iOS 9↗
▶
Apple
CVE-2015-5788: Safari 9↗
▶