1. CVE-Search
  2. CVE-2009-0960
ID CVE-2009-0960
Summary The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL.
References
Vulnerable Configurations
  • cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
  • cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*
    cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 09-08-2022 - 13:48)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:N/A:N
refmap via4
apple APPLE-SA-2009-06-17-1
bid
  • 35414
  • 35434
confirm http://support.apple.com/kb/HT3639
vupen ADV-2009-1621
xf iphone-ipod-mail-weak-security(51209)
Last major update 09-08-2022 - 13:48
Published 19-06-2009 - 16:30
Last modified 09-08-2022 - 13:48
Back to Top