PT-2015-1851 · Apple+2 · Webkit+4

Publicado

2015-08-16

·

Atualizado

2024-06-15

·

CVE-2015-3731

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions WebKit versions prior to 6.2.8 WebKit versions 7.x prior to 7.1.8 WebKit versions 8.x prior to 8.0.8 Apple iOS versions prior to 8.4.1
Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This is due to a buffer overflow in the WebKit component. The exploitation of this issue can lead to memory corruption and application crash.
Recommendations For WebKit versions prior to 6.2.8, update to version 6.2.8 or later. For WebKit versions 7.x prior to 7.1.8, update to version 7.1.8 or later. For WebKit versions 8.x prior to 8.0.8, update to version 8.0.8 or later. For Apple iOS versions prior to 8.4.1, update to version 8.4.1 or later.

Exploit

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2016-1245
ALT-PU-2016-1315
BDU:2015-11197
CVE-2015-3731
MGASA-2016-0116
MGASA-2016-0120
OPENSUSE-SU-2024:10461-1
USN-2937-1

Produtos afetados

Alt Linux
Ubuntu
Webkit
Ios
Itunes