CVE-2015-5788

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9

Description The issue is related to the WebKit Canvas implementation, which lacks protection of service data. This can be exploited by a remote attacker to bypass the Same Origin Policy and gain access to sensitive information by manipulating the domain restriction rules. The exploitation involves using a CANVAS element to obtain sensitive image information.

Recommendations For Apple iOS versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebKit Canvas implementation until a patch is available. Avoid using the CANVAS element in sensitive operations until the issue is resolved.