CVE-2015-1071: Medium severity safari vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1071?
CVE-2015-1071 is classified as a high severity vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2015-1071?
To fix CVE-2015-1071, you should update Apple Safari to the latest version available that is not affected by this vulnerability.
Which versions of Safari are affected by CVE-2015-1071?
CVE-2015-1071 affects Apple Safari versions prior to 6.2.4, all 7.x versions before 7.1.4, and all 8.x versions before 8.0.4.
Can CVE-2015-1071 cause data loss?
While CVE-2015-1071 primarily enables remote code execution and application crash, it may potentially lead to data loss depending on how the flaw is exploited.
Is CVE-2015-1071 being actively exploited?
There is no public information confirming that CVE-2015-1071 is being actively exploited, but vulnerabilities of this nature can be critical.