CVE-2016-1779
CVE-2016-1779
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request.
CVSS 6.5 · Medium · EPSS 2.8%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
qtwebkit-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2+dfsg-1ubuntu2.1
- 5.5.1+dfsg-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-source Ubuntu:16.04:LTS
- Versions
- 2.3.2-0ubuntu10
- 2.3.2-0ubuntu11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkitgtk Ubuntu:16.04:LTS
- Versions
- 2.4.9-2ubuntu2
- 2.4.10-0ubuntu1
- 2.4.11-0ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html
- http://www.securitytracker.com/id/1035353
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://www.securityfocus.com/archive/1/537948/100/0/threaded
- https://support.apple.com/HT206171
- https://support.apple.com/HT206166
- https://nvd.nist.gov/vuln/detail/CVE-2016-1779