CVE-2016-4590
Fixed in a distro release EPSS 1%
WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Products: apple safari, apple webkit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | webkit2gtk | 2.12.4-1 |
| Debian 13 | webkit2gtk | 2.12.4-1 |
| Debian 14 | webkit2gtk | 2.12.4-1 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | 2.12.5-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| openSUSE Tumbleweed | gtk3 | 2.14.2-2.1 |