Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-4583
HistoryJul 22, 2016 - 2:59 a.m.

CVE-2016-4583

2016-07-2202:59:05
CWE-362
[email protected]
web.nvd.nist.gov
6

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.

Affected configurations

Nvd
Node
applewebkitMatch-
AND
applesafariRange<9.1.2
OR
appleiphone_osRange<9.3.3
OR
appletvosRange<9.2.2
Node
webkitgtkwebkitgtk\+Range<2.12.2
VendorProductVersionCPE
applewebkit-cpe:2.3:a:apple:webkit:-:*:*:*:*:*:*:*
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
appletvos*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
webkitgtkwebkitgtk\+*cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*

Related

ubuntucve 1
prion 1
cvelist 1
cve 1
apple 6
openvas 2
nessus 3
ubuntu 1
ubuntucve
ubuntucve
CVE-2016-4583
2016-07-21 00:00:00
prion
prion
Design/Logic Flaw
2016-07-22 02:59:00
cvelist
cvelist
CVE-2016-4583
2016-07-22 01:00:00
cve
cve
CVE-2016-4583
2016-07-22 02:59:05
apple
apple
About the security content of Safari 9.1.2 - Apple Support
2017-01-23 03:54:41
About the security content of Safari 9.1.2
2016-07-18 00:00:00
About the security content of tvOS 9.2.2 - Apple Support
2017-11-30 10:32:51
openvas
openvas
Apple Safari Multiple Vulnerabilities (Dec 2016) - Mac OS X
2016-12-01 00:00:00
Ubuntu: Security Advisory (USN-3079-1)
2016-09-15 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 9.1.2 Multiple Vulnerabilities
2016-07-19 00:00:00
Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3079-1)
2016-09-15 00:00:00
Apple TV < 9.2.2 Multiple Vulnerabilities
2016-07-21 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2016-09-14 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON
Related for NVD:CVE-2016-4583
ubuntucve1prion1cvelist1cve1apple6openvas2nessus3ubuntu1