PT-2015-1850 · Apple · Webkit+3

Publicado

2015-08-16

·

Atualizado

2019-02-08

·

CVE-2015-3730

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Safari versions prior to 6.2.8 Safari versions 7.x prior to 7.1.8 Safari versions 8.x prior to 8.0.8 iOS versions prior to 8.4.1
Description The issue is caused by a buffer overflow in the WebKit component. It allows a remote attacker to execute arbitrary code or cause a denial of service via a specially crafted web site, resulting in memory corruption and application crash.
Recommendations For Safari versions prior to 6.2.8, update to version 6.2.8 or later. For Safari versions 7.x prior to 7.1.8, update to version 7.1.8 or later. For Safari versions 8.x prior to 8.0.8, update to version 8.0.8 or later. For iOS versions prior to 8.4.1, update to version 8.4.1 or later.

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2015-11196
CVE-2015-3730
MGASA-2016-0116

Produtos afetados

Safari
Webkit
Ios
Itunes