PT-2015-1868 · Apple+2 · Webkit+5

Publicado

2015-08-16

·

Atualizado

2024-06-15

·

CVE-2015-3748

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Safari versions prior to 6.2.8 Safari versions 7.x prior to 7.1.8 Safari versions 8.x prior to 8.0.8 Apple iOS versions prior to 8.4.1
Description The issue is caused by a buffer overflow in the WebKit component. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service, such as memory corruption and application crash, via a specially crafted web site.
Recommendations For Safari versions prior to 6.2.8, update to version 6.2.8 or later. For Safari versions 7.x prior to 7.1.8, update to version 7.1.8 or later. For Safari versions 8.x prior to 8.0.8, update to version 8.0.8 or later. For Apple iOS versions prior to 8.4.1, update to version 8.4.1 or later.

Exploit

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2016-1245
ALT-PU-2016-1315
BDU:2015-11214
CVE-2015-3748
MGASA-2016-0116
MGASA-2016-0120
OPENSUSE-SU-2024:10461-1
USN-2937-1

Produtos afetados

Alt Linux
Safari
Ubuntu
Webkit
Ios
Itunes