CVE-2015-1112

Published: Apr 10, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, as used on iOS before 8.3 and other platforms, does not properly delete browsing-history data from the history.plist file, which allows attackers to obtain sensitive information by reading this file.

Affected (19)

Products: Apple: Iphone Os, Safari

Apple

2 products

Iphone Os

Safari

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 8.2

Configuration B

18 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 6.2.4
Apple Safari	Version 7.0.1
Apple Safari	Version 7.0.2
Apple Safari	Version 7.0.3
Apple Safari	Version 7.0.4
Apple Safari	Version 7.0.5
Apple Safari	Version 7.0.6
Apple Safari	Version 7.0
Apple Safari	Version 7.1.0
Apple Safari	Version 7.1.1
Apple Safari	Version 7.1.2
Apple Safari	Version 7.1.3
Apple Safari	Version 7.1.4
Apple Safari	Version 8.0.0
Apple Safari	Version 8.0.1
Apple Safari	Version 8.0.2
Apple Safari	Version 8.0.3
Apple Safari	Version 8.0.4