Published: 10/04/2015 Updated: 08/03/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

WebKit, as used in Apple iOS prior to 8.3, Apple TV prior to 7.2, and Apple Safari prior to 6.2.5, 7.x prior to 7.1.5, and 8.x prior to 8.0.5, allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari
apple safari 7.0
apple safari 7.1.0
apple safari 7.1.1
apple safari 8.0.3
apple safari 8.0.4
apple safari 7.0.3
apple safari 7.0.4
apple safari 7.1.4
apple safari 8.0.0
apple safari 7.0.5
apple safari 7.0.6
apple safari 8.0.1
apple safari 8.0.2
apple safari 7.0.1
apple safari 7.0.2
apple safari 7.1.2
apple safari 7.1.3
apple itunes
apple iphone os
apple tvos

Several security issues were fixed in WebKitGTK+ ...

NVD-CWE-noinfo https://support.apple.com/HT204658 http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html https://support.apple.com/HT204662 http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html https://support.apple.com/HT204661 http://www.securitytracker.com/id/1032047 http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html https://support.apple.com/kb/HT204949 http://www.securityfocus.com/bid/73972 http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html http://www.ubuntu.com/usn/USN-2937-1 http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html https://usn.ubuntu.com/2937-1/https://nvd.nist.gov

CVE-2015-1122

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect