NuytsTech Security

CVE-2010-1407

by ·

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to obtain sensitive information via a crafted HTML document.

Date published : 2010-06-22

http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Tags: