PT-2015-5137 · Apple+2 · Safari+3

Joe Vennix

·

Publicado

2015-05-07

·

Atualizado

2024-06-15

·

CVE-2015-1155

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.6 Apple Safari versions 7.x prior to 7.1.6 Apple Safari versions 8.x prior to 8.0.6
Description The issue allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site. This is related to the history implementation in WebKit.
Recommendations For Apple Safari versions prior to 6.2.6, update to version 6.2.6 or later. For Apple Safari versions 7.x prior to 7.1.6, update to version 7.1.6 or later. For Apple Safari versions 8.x prior to 8.0.6, update to version 8.0.6 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2016-1245
ALT-PU-2016-1315
CVE-2015-1155
MGASA-2016-0116
MGASA-2016-0120
OPENSUSE-SU-2024:10461-1
USN-2937-1
ZDI-15-228

Produtos afetados

Alt Linux
Safari
Ubuntu
Webkit