CVE-2010-3829 in iOS
Summary
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/07/2010
Disclosure
11/26/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55546 | Apple iOS WebKit access control | 264 | Proof-of-Concept | Official fix | CVE-2010-3829 |