Detections
Analytics
Alpine: webkit2gtk: security update to 2.12.5-r0
high Tenable Cloud Security Plugin ID 407555
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote
attackers to bypass the Same Origin Policy via a crafted web site. (CVE-2016-4590)
- WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location
variable, which allows remote attackers to access the local filesystem via unspecified vectors.
(CVE-2016-4591)
- WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to
execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a
different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624. (CVE-2016-4622)
- WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to
execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a
different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623. (CVE-2016-4624)
See Also
https://security.alpinelinux.org/vuln/CVE-2016-4590
https://security.alpinelinux.org/vuln/CVE-2016-4591
Plugin Details
Severity: High
ID: 407555
Version: Revision 1.25
Type: Local
Published: 10/31/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.99
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2016-4591
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2016-4624
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 7/13/2016
Reference Information
CVE: CVE-2016-4590, CVE-2016-4591, CVE-2016-4622, CVE-2016-4624