CVE-2010-3829: Medium severity iphone os vulnerability
Published Nov 26, 2010
·Updated
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
Affected Software
29 affected components
apple iPhone OS=3.0
apple iPhone OS=3.2
apple iPhone OS=3.1.3
apple iPhone OS=1.0.2
apple iPhone OS=4.0.2
apple iPhone OS=2.2
apple iPhone OS=1.1.1
apple iPhone OS<=4.1
apple iPhone OS=2.0.0
apple iPhone OS=3.1.2
apple iPhone OS=3.0.1
apple iPhone OS=1.1.2
apple iPhone OS=3.1
apple iPhone OS=1.1.3
apple iPhone OS=1.1.0
apple iPhone OS=1.0.1
apple iPhone OS=2.1
apple iPhone OS=1.1.5
apple iPhone OS=4.0.1
apple iPhone OS=2.1.1
apple iPhone OS=1.1.4
apple iPhone OS=1.0.0
apple iPhone OS=2.0.2
apple iPhone OS=2.0
apple iPhone OS=2.0.1
apple iPhone OS=4.0
apple iPhone OS=2.2.1
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Event History
Nov 26, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3829?
CVE-2010-3829 has been rated as a low severity vulnerability.
2
How do I fix CVE-2010-3829?
To mitigate CVE-2010-3829, upgrade to a version of iOS later than 4.2.
3
What is the nature of the vulnerability identified in CVE-2010-3829?
CVE-2010-3829 allows remote attackers to bypass remote image loading settings in Apple Mail via crafted HTML messages.
4
Which versions of iOS are affected by CVE-2010-3829?
CVE-2010-3829 affects all versions of iOS prior to 4.2.
5
Can CVE-2010-3829 lead to data leakage?
Yes, CVE-2010-3829 can potentially lead to data leakage through unanticipated image loading.