Lucene search
Ubuntu.comUB:CVE-2015-1155HistoryMay 07, 2015 - 12:00 a.m.
CVE-2015-1155
2015-05-0700:00:00
ubuntu.com
ubuntu.com
5
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
84.6%
The history implementation in WebKit, as used in Apple Safari before 6.2.6,
7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass
the Same Origin Policy and read arbitrary files via a crafted web site.
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
References
Related
myhack58
myhack58
zdi
zdi
Apple Safari file:// Redirection Sandbox Escape Vulnerabliity
2015-05-15 00:00:00
cve
cve
CVE-2015-1155
2015-05-08 00:59:00
prion
prion
Design/Logic Flaw
2015-05-08 00:59:00
kaspersky
kaspersky
KLA10573 Multiple vulnerabilities in Apple Safari
2015-05-07 00:00:00
nessus
nessus
Safari < 6.2.6 / 7.1.6 / 8.0.6 Multiple Vulnerabilities
2015-09-17 00:00:00
Mac OS X : Apple Safari < 6.2.6 / 7.1.6 / 8.0.6 Multiple Vulnerabilities
2015-05-08 00:00:00
Fedora 22 : webkitgtk-2.4.10-1.fc22 (2016-9ec1850fff)
2016-04-01 00:00:00
securityvulns
securityvulns
Apple Safari / Webkit multiple security vulnerabilities
2015-05-10 00:00:00
APPLE-SA-2015-05-06-1 Safari 8.0.6, Safari 7.1.6, and Safari 6.2.6
2015-05-10 00:00:00
Apple iOS multiple security vulnerabilities
2015-07-05 00:00:00
threatpost
threatpost
Apple Fixes WebKit Vulnerabilities in Safari Browser
2015-05-07 10:49:05
openvas
openvas
Apple Safari Multiple Vulnerabilities -01 (May 2015) - Mac OS X
2015-05-11 00:00:00
Ubuntu: Security Advisory (USN-2937-1)
2016-03-22 00:00:00
Fedora Update for webkitgtk FEDORA-2016-5
2016-03-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: webkitgtk-2.4.10-1.fc22
2016-03-29 19:23:05
[SECURITY] Fedora 23 Update: webkitgtk3-2.4.10-1.fc23
2016-03-21 01:53:49
[SECURITY] Fedora 24 Update: webkitgtk3-2.4.10-1.fc24
2016-03-27 00:38:22
mageia
mageia
Updated webkit packages fix security vulnerability
2016-03-25 09:38:37
Updated webkit2 packages fix security vulnerability
2016-03-25 09:38:37
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2016-03-21 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
84.6%
Related for UB:CVE-2015-1155