2 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-1864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attacker...
CVE-2016-1864
CVE-2016-1864 affects WebKit’s XSS auditor used in Apple iOS before 9.3 and Safari before 9.1. The issue is that redirects are not properly handled when the auditor runs in block mode, allowing a crafted URL to leak sensitive information to remote attackers. This is a WebKit-level bug affecting h...