CVE-2015-1120
8.8 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.8%
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
References
lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
lists.apple.com/archives/security-announce/2015/Jun/msg00006.html
lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
www.securityfocus.com/bid/73972
www.securitytracker.com/id/1032047
www.ubuntu.com/usn/USN-2937-1
support.apple.com/HT204658
support.apple.com/HT204661
support.apple.com/HT204662
support.apple.com/kb/HT204949
Related
8.8 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.8%