Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Andrei Neculaesei

#51034de 53,640
4.3CVSS total
Vulnerabilidades · 1
PT-2015-2078
4.3
2015-09-16
Apple · Webkit · CVE-2015-5820
**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 9 **Description** The issue is related to insufficient input validation in the WebKit component of the iOS operating system. This can be exploited by a remote attacker to trigger certain actions by manipulating `tel://`, `facetime://`, or `facetime-audio://` URLs. **Recommendations** For versions prior to 9, update to iOS version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebKit component until a patch is available. Avoid using the `tel://`, `facetime://`, and `facetime-audio://` URLs in affected iOS versions until the issue is resolved.