Lucene search
HistorySep 18, 2015 - 10:59 a.m.
CVE-2015-5838
cve-2015-5838
springboard
apple ios
security vulnerability
api calls
dialog spoofing
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.3%
SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app.
Affected configurations
Node
appleiphone_osRange≤8.4.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone_os | apple iphone os | le | 8.4.1 |
Related
prion
prion
Code injection
2015-09-18 10:59:00
cvelist
cvelist
CVE-2015-5838
2015-09-18 10:00:00
nvd
nvd
CVE-2015-5838
2015-09-18 10:59:53
securityvulns
securityvulns
APPLE-SA-2015-09-16-1 iOS 9
2015-10-05 00:00:00
Apple iOS multiple security vulnerabilities
2015-10-25 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.3%
Related for CVE-2015-5838