CVE-2015-3727 (GCVE-0-2015-3727)

Vulnerability from cvelistv5 – Published: 2015-07-03 01:00 – Updated: 2024-08-06 05:56
VLAI?
Summary
WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://support.apple.com/kb/HT204941 x_refsource_CONFIRM
http://support.apple.com/kb/HT204950 x_refsource_CONFIRM
http://www.securityfocus.com/bid/75492 vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-updates/2016-0… vendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce… vendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce… vendor-advisoryx_refsource_APPLE
http://www.securitytracker.com/id/1032754 vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2937-1 vendor-advisoryx_refsource_UBUNTU
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:56:14.635Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT204941"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT204950"
          },
          {
            "name": "75492",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75492"
          },
          {
            "name": "openSUSE-SU-2016:0915",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html"
          },
          {
            "name": "APPLE-SA-2015-06-30-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
          },
          {
            "name": "APPLE-SA-2015-06-30-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html"
          },
          {
            "name": "1032754",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032754"
          },
          {
            "name": "USN-2937-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2937-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-06-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site\u0027s database via a crafted web site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-23T18:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT204941"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT204950"
        },
        {
          "name": "75492",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75492"
        },
        {
          "name": "openSUSE-SU-2016:0915",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html"
        },
        {
          "name": "APPLE-SA-2015-06-30-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
        },
        {
          "name": "APPLE-SA-2015-06-30-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html"
        },
        {
          "name": "1032754",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032754"
        },
        {
          "name": "USN-2937-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2937-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2015-3727",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site\u0027s database via a crafted web site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://support.apple.com/kb/HT204941",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT204941"
            },
            {
              "name": "http://support.apple.com/kb/HT204950",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT204950"
            },
            {
              "name": "75492",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75492"
            },
            {
              "name": "openSUSE-SU-2016:0915",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html"
            },
            {
              "name": "APPLE-SA-2015-06-30-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
            },
            {
              "name": "APPLE-SA-2015-06-30-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html"
            },
            {
              "name": "1032754",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032754"
            },
            {
              "name": "USN-2937-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2937-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2015-3727",
    "datePublished": "2015-07-03T01:00:00",
    "dateReserved": "2015-05-07T00:00:00",
    "dateUpdated": "2024-08-06T05:56:14.635Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"6.2.6\", \"matchCriteriaId\": \"F3CBE396-522D-42D2-90D8-EC816E582642\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"88D46FE5-10D2-44A0-ACAE-CEED8BD0C30C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"391B4255-4434-4EB3-929B-3E593D9CD249\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"40B87D10-55B3-42E7-8FF6-93EDF003337D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D4EBCD8-9DD5-468E-8B5B-49E38FEBCEC2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B8C7AEC-F54A-4843-A0EA-C7DD847BEF5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"49457917-495E-4D17-A0AB-D2A163D4721D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8CCADCE6-92F3-4A30-AA29-4E3394C1A3CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E74D3F4B-111E-4F51-ACB4-6725C4BF8DB6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"223B13DA-9328-46C2-8426-3182D55E6669\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD636DF3-E590-4603-9D18-CC2375A97750\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A0F8336F-D0F8-4337-9DF6-51B60F8A2E9B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"79C2EF49-A9F0-4612-903A-A3A95805277E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E1934F2-5917-4C15-8869-82C557BF430D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:7.1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3567D600-C756-4FB5-B4B1-9B014A990A7B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3587E5B7-4B66-4DB4-86A3-6E37034747C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB1C61F7-BAF4-4061-8B1A-D7F8D597F2D5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A5C7D83-EA9E-4E26-910D-8471252723EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE29EE2D-9EA8-4486-BC3F-B0CCF9C396F6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7FDB5E2A-F3BD-4500-922E-A191C45DE93C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E55F641-AC7F-41AD-BB6A-F69831DAD49E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:8.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C46A6C6-292D-4F67-9DF4-DFA01DCEA387\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"EB31BE7C-CB6D-447E-AFF8-618998950FC5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"10.10.3\", \"matchCriteriaId\": \"68566BD8-D5DD-4747-9C9A-59154400EBFA\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site\u0027s database via a crafted web site.\"}, {\"lang\": \"es\", \"value\": \"WebKit en Apple Safari anterior a 6.2.7, 7.x anterior a 7.1.7, y 8.x anterior a 8.0.7, utilizado en Apple iOS anterior a 8.4 y otros productos, no restringe correctamente las operaciones de renombramiento en las tablas WebSQL, lo que permite a atacantes remotos acceder a la base de datos de un sitio web arbitrario a trav\\u00e9s de un sitio web manipulado.\"}]",
      "id": "CVE-2015-3727",
      "lastModified": "2024-11-21T02:29:43.730",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2015-07-03T02:00:17.913",
      "references": "[{\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html\", \"source\": \"product-security@apple.com\"}, {\"url\": \"http://support.apple.com/kb/HT204941\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://support.apple.com/kb/HT204950\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/75492\", \"source\": \"product-security@apple.com\"}, {\"url\": \"http://www.securitytracker.com/id/1032754\", \"source\": \"product-security@apple.com\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-2937-1\", \"source\": \"product-security@apple.com\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://support.apple.com/kb/HT204941\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://support.apple.com/kb/HT204950\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/75492\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1032754\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-2937-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "product-security@apple.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-264\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2015-3727\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2015-07-03T02:00:17.913\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site\u0027s database via a crafted web site.\"},{\"lang\":\"es\",\"value\":\"WebKit en Apple Safari anterior a 6.2.7, 7.x anterior a 7.1.7, y 8.x anterior a 8.0.7, utilizado en Apple iOS anterior a 8.4 y otros productos, no restringe correctamente las operaciones de renombramiento en las tablas WebSQL, lo que permite a atacantes remotos acceder a la base de datos de un sitio web arbitrario a trav\u00e9s de un sitio web manipulado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"6.2.6\",\"matchCriteriaId\":\"F3CBE396-522D-42D2-90D8-EC816E582642\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88D46FE5-10D2-44A0-ACAE-CEED8BD0C30C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"391B4255-4434-4EB3-929B-3E593D9CD249\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40B87D10-55B3-42E7-8FF6-93EDF003337D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D4EBCD8-9DD5-468E-8B5B-49E38FEBCEC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B8C7AEC-F54A-4843-A0EA-C7DD847BEF5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49457917-495E-4D17-A0AB-D2A163D4721D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CCADCE6-92F3-4A30-AA29-4E3394C1A3CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E74D3F4B-111E-4F51-ACB4-6725C4BF8DB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"223B13DA-9328-46C2-8426-3182D55E6669\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD636DF3-E590-4603-9D18-CC2375A97750\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0F8336F-D0F8-4337-9DF6-51B60F8A2E9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79C2EF49-A9F0-4612-903A-A3A95805277E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E1934F2-5917-4C15-8869-82C557BF430D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:7.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3567D600-C756-4FB5-B4B1-9B014A990A7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3587E5B7-4B66-4DB4-86A3-6E37034747C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB1C61F7-BAF4-4061-8B1A-D7F8D597F2D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A5C7D83-EA9E-4E26-910D-8471252723EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE29EE2D-9EA8-4486-BC3F-B0CCF9C396F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FDB5E2A-F3BD-4500-922E-A191C45DE93C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E55F641-AC7F-41AD-BB6A-F69831DAD49E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:8.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C46A6C6-292D-4F67-9DF4-DFA01DCEA387\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"EB31BE7C-CB6D-447E-AFF8-618998950FC5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.10.3\",\"matchCriteriaId\":\"68566BD8-D5DD-4747-9C9A-59154400EBFA\"}]}]}],\"references\":[{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://support.apple.com/kb/HT204941\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT204950\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/75492\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://www.securitytracker.com/id/1032754\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2937-1\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.apple.com/kb/HT204941\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT204950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/75492\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1032754\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2937-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…