6.8

CVE-2015-1122

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version <= 6.2.4
Apple ≫ Safari Version 7.0
Apple ≫ Safari Version 7.0.1
Apple ≫ Safari Version 7.0.2
Apple ≫ Safari Version 7.0.3
Apple ≫ Safari Version 7.0.4
Apple ≫ Safari Version 7.0.5
Apple ≫ Safari Version 7.0.6
Apple ≫ Safari Version 7.1.0
Apple ≫ Safari Version 7.1.1
Apple ≫ Safari Version 7.1.2
Apple ≫ Safari Version 7.1.3
Apple ≫ Safari Version 7.1.4
Apple ≫ Safari Version 8.0.0
Apple ≫ Safari Version 8.0.1
Apple ≫ Safari Version 8.0.2
Apple ≫ Safari Version 8.0.3
Apple ≫ Safari Version 8.0.4
Apple ≫ iTunes Version <= 12.1
Apple ≫ iPhone OS Version <= 8.2
Apple ≫ tvOS Version <= 7.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.13% 0.865
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
http://www.ubuntu.com/usn/USN-2937-1
http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html
Patch
Vendor Advisory
https://support.apple.com/kb/HT204949
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
Vendor Advisory
https://support.apple.com/HT204661
Vendor Advisory
https://support.apple.com/HT204662
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
Vendor Advisory
http://www.securitytracker.com/id/1032047
https://support.apple.com/HT204658
Vendor Advisory
http://www.securityfocus.com/bid/73972
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html