Ubuntu.comUB:CVE-2015-3727CVE-2015-3727
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.4%
WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before
8.0.7, as used in Apple iOS before 8.4 and other products, does not
properly restrict rename operations on WebSQL tables, which allows remote
attackers to access an arbitrary web site’s database via a crafted web
site.
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
References
lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
lists.apple.com/archives/security-announce/2015/Jun/msg00004.html
support.apple.com/kb/HT204941
support.apple.com/kb/HT204950
launchpad.net/bugs/cve/CVE-2015-3727
nvd.nist.gov/vuln/detail/CVE-2015-3727
security-tracker.debian.org/tracker/CVE-2015-3727
ubuntu.com/security/notices/USN-2937-1
www.cve.org/CVERecord?id=CVE-2015-3727
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.4%