CVE-2015-3755

Опубликовано: 16 авг. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.

Ссылки

http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html
Mailing List
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
Mailing List
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/76344
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033274
Third Party Advisory
VDB Entry
https://support.apple.com/kb/HT205030
Vendor Advisory
https://support.apple.com/kb/HT205033
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html
Mailing List
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
Mailing List
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/76344
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033274
Third Party Advisory
VDB Entry
https://support.apple.com/kb/HT205030
Vendor Advisory
https://support.apple.com/kb/HT205033
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.2.8 (исключая)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия от 7.0 (включая) до 7.1.8 (исключая)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия от 8.0 (включая) до 8.0.8 (исключая)

Конфигурация 2

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 8.4.1 (исключая)

EPSS

Процентиль: 80%

0.01386

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-254

Связанные уязвимости

CVE-2015-3755

ubuntu

больше 10 лет назад

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.

GHSA-42x7-26ff-22r9

github

больше 3 лет назад

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.

BDU:2015-11220

fstec

больше 10 лет назад

Уязвимость браузера Safari и операционной системы iOS, позволяющая нарушителю подменить элементы пользовательского интерфейса

openSUSE-SU-2016:0761-1

suse-cvrf

почти 10 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 80%

0.01386

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-254