CVE-2016-1786

MEDIUM

WebKit in Apple iOS <9.3 & Safari <9.1 - CSRF

Title source: llm

Description

The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted web site.

References (6)

[Vendor Advisory] http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html

[Vendor Advisory] http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/537948/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1035353

[Vendor Advisory] https://support.apple.com/HT206166

[Vendor Advisory] https://support.apple.com/HT206171

Scores

CVSS v3 5.4

EPSS 0.0044

EPSS Percentile 62.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Classification

CWE

CWE-200

Status draft

Affected Products (2)

apple/safari < 9.0.3

apple/iphone_os < 9.2.1

Timeline

Published Mar 24, 2016

Tracked Since Feb 18, 2026