CVE-2015-1122

Apple WebKit - Crafted Web Site Memory Corruption Code Execution

Title source: manual

Description

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

References (13)

Core 13

Core References

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT204658

Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html

Patch, Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html

Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/73972

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032047

Vendor Advisory x_refsource_confirm

https://support.apple.com/kb/HT204949

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT204662

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html

Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT204661

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-2937-1

Scores

EPSS 0.0313

EPSS Percentile 86.5%

Details

Status published

Products (21)

apple/iphone_os < 8.2

apple/itunes < 12.1

apple/safari 7.0

apple/safari 7.0.1

apple/safari 7.0.2

apple/safari 7.0.3

apple/safari 7.0.4

apple/safari 7.0.5

apple/safari 7.0.6

apple/safari 7.1.0

... and 11 more

Published Apr 10, 2015

Tracked Since Feb 18, 2026