PT-2015-5110 · Apple · Ios+1

Jouko Pynnonen

·

Publicado

2015-04-10

·

Atualizado

2016-03-25

·

CVE-2015-1126

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5
Description The issue is related to how WebKit handles the userinfo field in FTP URLs, allowing remote attackers to trigger incorrect resource access.
Recommendations For Apple iOS versions prior to 8.3, update to version 8.3 or later. For Apple Safari versions prior to 6.2.5, update to version 6.2.5 or later. For Apple Safari versions 7.x prior to 7.1.5, update to version 7.1.5 or later. For Apple Safari versions 8.x prior to 8.0.5, update to version 8.0.5 or later.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-1126
MGASA-2016-0116

Produtos afetados

Safari
Ios