CVE-2009-0960: Medium severity iphone os vulnerability
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0960?
CVE-2009-0960 has a significant security risk as it allows remote attackers to track email reads.
How do I fix CVE-2009-0960?
There is no direct fix for CVE-2009-0960 since later versions of the Apple iPhone OS address this issue, so upgrading is recommended.
Which devices are affected by CVE-2009-0960?
CVE-2009-0960 affects Apple iPhone OS versions from 1.0 to 2.2.1 and iPod touch versions 1.1 to 2.2.1.
What does CVE-2009-0960 exploit?
CVE-2009-0960 exploits the lack of an option to disable remote image loading in HTML emails.
Could CVE-2009-0960 lead to privacy issues?
Yes, CVE-2009-0960 could lead to privacy breaches as attackers can determine when a user reads an email.