CVE-2010-3829
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting...
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
Exploit likelihood
What each source reports
NVD Score used
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
- Record
CVE-2010-3829- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
- Record
CVE-2010-3829- Updated
- 2026-11-02
EUVDEUVD-2010-3808 No score
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
- Record
EUVD-2010-3808- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x3m3-q3xc-8m5j No score
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting...
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
- Record
GHSA-x3m3-q3xc-8m5j- Updated
- 2026-11-02
OSVUBUNTU-CVE-2010-3829 No score
WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.
- Record
UBUNTU-CVE-2010-3829- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3829 is a medium vulnerability (CVSS 5.8) in Apple Iphone Os, published November 26, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. No source names a fixed version.
References
secunia.com/advisories/43068
vupen.com/english/advisories/2011/0212
exchange.xforce.ibmcloud.com/vulnerabilities/63418
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Show 9 moreShow less
securitytracker.com/id?1024773
support.apple.com/kb/HT4808
lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
nvd.nist.gov/vuln/detail/CVE-2010-3829
github.com/advisories/GHSA-x3m3-q3xc-8m5j
ubuntu.com/security/CVE-2010-3829
cve.org/CVERecord?id=CVE-2010-3829