CVE-2015-3753
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and…
Does this matter?
Lower severity and a low EPSS score (2.66%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.66% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/safari · apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlMailing List, Vendor Advisory
- http://www.securityfocus.com/bid/76341Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033274Third Party Advisory, VDB Entry
- https://support.apple.com/kb/HT205030Vendor Advisory
- https://support.apple.com/kb/HT205033Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlMailing List, Vendor Advisory
- http://www.securityfocus.com/bid/76341Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033274Third Party Advisory, VDB Entry
- https://support.apple.com/kb/HT205030Vendor Advisory
- https://support.apple.com/kb/HT205033Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.