Lucene search

K
cve[email protected]CVE-2015-5820
HistorySep 18, 2015 - 10:59 a.m.

CVE-2015-5820

2015-09-1810:59:39
CWE-20
web.nvd.nist.gov
30
cve-2015-5820
webkit
apple ios
remote attackers
dialing action
crafted url
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.6%

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted (1) tel://, (2) facetime://, or (3) facetime-audio:// URL.

Affected configurations

NVD
Node
applesafariRange8.0.8
Node
appleiphone_osRange8.4.1
CPENameOperatorVersion
apple:safariapple safarile8.0.8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.6%