CVE-2016-4583: Race Condition
Published Jul 22, 2016
·Updated
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.
Affected Software
5 affected components
Apple WebKit
Apple Safari<9.1.2
Apple iPhone OS<9.3.3
Apple tvOS<9.2.2
WebKitGTK Webkitgtk\+<2.12.2
Event History
Jul 22, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4583?
CVE-2016-4583 is considered to have a moderate severity due to its ability to bypass the Same Origin Policy.
2
How do I fix CVE-2016-4583?
To fix CVE-2016-4583, update to iOS version 9.3.3, Safari version 9.1.2, or tvOS version 9.2.2 or later.
3
What systems are affected by CVE-2016-4583?
CVE-2016-4583 affects Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2.
4
Can CVE-2016-4583 be exploited remotely?
Yes, CVE-2016-4583 can be exploited remotely via a timing attack involving an SVG document.
5
What is the impact of CVE-2016-4583?
The impact of CVE-2016-4583 is the potential unauthorized access to image data from unintended websites.