Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Andrei Neculaesei

#51001of 53,639
4.3Total CVSS
Vulnerabilities · 1
PT-2015-2078
4.3
2015-09-16
Apple · Webkit · CVE-2015-5820
**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 9 **Description** The issue is related to insufficient input validation in the WebKit component of the iOS operating system. This can be exploited by a remote attacker to trigger certain actions by manipulating `tel://`, `facetime://`, or `facetime-audio://` URLs. **Recommendations** For versions prior to 9, update to iOS version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebKit component until a patch is available. Avoid using the `tel://`, `facetime://`, and `facetime-audio://` URLs in affected iOS versions until the issue is resolved.