CVE-2015-3755

Apple Safari 6.0-6.2.7, 7.x < 7.1.8, 8.x < 8.0.8 - User Interface Spoofing via Malformed URL

Title source: llm
STIX 2.1

Description

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033274
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT205030
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
Mailing List, Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/76344
Mailing List, Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT205033

Scores

EPSS 0.0223
EPSS Percentile 80.9%

Details

CWE
CWE-254
Status published
Products (2)
apple/iphone_os < 8.4.1
apple/safari 6.0 - 6.2.8
Published Aug 16, 2015
Tracked Since Feb 18, 2026