Unscored CVE-2016-1780 EUVD-2016-2875GHSA-chfr-83gv-5hhp

WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to…

Published Mar 24, 2016 · Updated Aug 5, 2024 · Assigned by apple

Package: qtwebkit-opensource-src Package: qtwebkit-source Package: webkitgtk Ecosystem: Ubuntu

Description

WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	webkitgtk +2	No fix yet	—

References

1035353 vdb-entry
APPLE-SA-2016-03-21-1 vendor-advisory
https://support.apple.com/HT206166