Unscored CVE-2016-1781 EUVD-2016-2876GHSA-74x2-79f4-hv52

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track user…

Published Mar 24, 2016 · Updated Aug 5, 2024 · Assigned by apple

Package: qtwebkit-opensource-src Package: qtwebkit-source Package: webkitgtk Ecosystem: Ubuntu

Description

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	webkitgtk +2	No fix yet	—

References

https://support.apple.com/HT205635
1035353 vdb-entry
20160331 WebKitGTK+ Security Advisory WSA-2016-0003 mailing-list
APPLE-SA-2015-12-08-5 vendor-advisory
APPLE-SA-2015-12-08-1 vendor-advisory
https://support.apple.com/HT205639