Lucene search
HistoryMar 18, 2015 - 10:59 p.m.
CVE-2015-1084
cve-2015-1084
webkit
apple safari
url display inconsistency
phishing attack
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
Affected configurations
Node
appleiphone_osRange≤8.2
Node
applesafariRange≤6.2.3
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
ORapplesafariMatch7.0.3
ORapplesafariMatch7.0.4
ORapplesafariMatch7.0.5
ORapplesafariMatch7.0.6
ORapplesafariMatch7.1.0
ORapplesafariMatch7.1.1
ORapplesafariMatch7.1.2
ORapplesafariMatch7.1.3
ORapplesafariMatch8.0.0
ORapplesafariMatch8.0.1
ORapplesafariMatch8.0.2
ORapplesafariMatch8.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone_os | apple iphone os | le | 8.2 |
Related
nvd
nvd
CVE-2015-1084
2015-03-18 22:59:15
prion
prion
Code injection
2015-03-18 22:59:00
cvelist
cvelist
CVE-2015-1084
2015-03-18 22:00:00
kaspersky
kaspersky
KLA10466 Multiple vulnerabilities in Apple Safari
2015-03-17 00:00:00
securityvulns
securityvulns
Apple Safari / Webkit multiple security vulnerabilities
2015-03-18 00:00:00
APPLE-SA-2015-03-17-1 Safari 8.0.4, Safari 7.1.4, and Safari 6.2.4
2015-03-18 00:00:00
Apple iOS multiple security vulnerabilities
2015-04-17 00:00:00
nessus
nessus
Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities
2015-04-17 00:00:00
Mac OS X : Apple Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities
2015-03-18 00:00:00
openvas
openvas
Apple Safari 'Webkit' Multiple Vulnerabilities -01 (Mar 2015) - Mac OS X
2015-03-27 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2015-1084