CVE-2015-1154: Medium severity itunes vulnerability
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1153.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1154?
CVE-2015-1154 is classified as a high severity vulnerability as it allows remote code execution or application crashes.
How do I fix CVE-2015-1154?
To remediate CVE-2015-1154, update Apple Safari to version 8.0.6 or later.
Which versions of Safari are affected by CVE-2015-1154?
CVE-2015-1154 affects Safari versions prior to 8.0.6, including 6.2.5, 7.x before 7.1.6, and earlier versions.
Can CVE-2015-1154 cause data loss?
CVE-2015-1154 can potentially lead to data loss through application crashes triggered by crafted web content.
What types of attacks can exploit CVE-2015-1154?
CVE-2015-1154 can be exploited via crafted websites that lead to memory corruption and arbitrary code execution.