CVE-2015-1071

Published: Mar 18, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

Affected (19)

Products: Apple: Safari, Tvos, Iphone Os, Itunes

4 products

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 6.2.3
Apple Safari	Version 7.0.1
Apple Safari	Version 7.0.2
Apple Safari	Version 7.0.3
Apple Safari	Version 7.0.4
Apple Safari	Version 7.0.5
Apple Safari	Version 7.0.6
Apple Safari	Version 7.0
Apple Safari	Version 7.1.0
Apple Safari	Version 7.1.1
Apple Safari	Version 7.1.2
Apple Safari	Version 7.1.3
Apple Safari	Version 8.0.0
Apple Safari	Version 8.0.1
Apple Safari	Version 8.0.2
Apple Safari	Version 8.0.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Apple Tvos	Up to 7.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 8.2

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Apple Itunes	Up to 12.1

Related CWEs

References (22)

http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html

Source: product-security@apple.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html

Source: product-security@apple.com

http://www.securitytracker.com/id/1031936

Source: product-security@apple.com

http://www.ubuntu.com/usn/USN-2937-1

Source: product-security@apple.com

https://support.apple.com/HT204560

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT204661

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT204662

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT204949

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031936

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2937-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT204560

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT204661

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT204662

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT204949

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.