CVE-2016-4590: Input Validation
WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.12.5-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4590?
CVE-2016-4590 is classified as a high severity vulnerability due to its potential to allow attackers to bypass the Same Origin Policy.
How do I fix CVE-2016-4590?
To remediate CVE-2016-4590, users should update their Apple iOS to version 9.3.3 or later and Safari to version 9.1.2 or later.
Which versions are affected by CVE-2016-4590?
CVE-2016-4590 affects Apple iOS versions prior to 9.3.3 and Safari versions before 9.1.2.
What does CVE-2016-4590 exploit in the affected software?
CVE-2016-4590 exploits vulnerabilities in WebKit that mishandle about: URLs to bypass the Same Origin Policy.
Can CVE-2016-4590 lead to data theft?
Yes, CVE-2016-4590 can potentially lead to data theft by allowing unauthorized access to sensitive information through the bypass of web security policies.