CVE-2015-1084
First published: Wed Mar 18 2015(Updated: )
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iStyle @cosme iPhone OS | <=8.2 | |
| Apple Mobile Safari | <=6.2.3 | |
| Apple Mobile Safari | =7.0 | |
| Apple Mobile Safari | =7.0.1 | |
| Apple Mobile Safari | =7.0.2 | |
| Apple Mobile Safari | =7.0.3 | |
| Apple Mobile Safari | =7.0.4 | |
| Apple Mobile Safari | =7.0.5 | |
| Apple Mobile Safari | =7.0.6 | |
| Apple Mobile Safari | =7.1.0 | |
| Apple Mobile Safari | =7.1.1 | |
| Apple Mobile Safari | =7.1.2 | |
| Apple Mobile Safari | =7.1.3 | |
| Apple Mobile Safari | =8.0.0 | |
| Apple Mobile Safari | =8.0.1 | |
| Apple Mobile Safari | =8.0.2 | |
| Apple Mobile Safari | =8.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-1084?
CVE-2015-1084 has a medium severity level, as it can facilitate phishing attacks.
How do I fix CVE-2015-1084?
To fix CVE-2015-1084, update to the latest version of Apple Safari or iPhone OS that patches this vulnerability.
Which versions of Safari are affected by CVE-2015-1084?
CVE-2015-1084 affects Apple Safari versions prior to 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4.
Can CVE-2015-1084 be exploited remotely?
Yes, CVE-2015-1084 can be exploited remotely to conduct phishing attacks via crafted URLs.
What platforms are impacted by CVE-2015-1084?
CVE-2015-1084 impacts users of Apple Safari on macOS and iOS devices, including iPhone OS.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/8.2
- canonical/apple mobile safari
- version/apple mobile safari/6.2.3
- version/apple mobile safari/7.0
- version/apple mobile safari/7.0.1
- version/apple mobile safari/7.0.2
- version/apple mobile safari/7.0.3
- version/apple mobile safari/7.0.4
- version/apple mobile safari/7.0.5
- version/apple mobile safari/7.0.6
- version/apple mobile safari/7.1.0
- version/apple mobile safari/7.1.1
- version/apple mobile safari/7.1.2
- version/apple mobile safari/7.1.3
- version/apple mobile safari/8.0.0
- version/apple mobile safari/8.0.1
- version/apple mobile safari/8.0.2
- version/apple mobile safari/8.0.3