CVE-2015-1155
First published: Fri May 08 2015(Updated: )
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPhone OS | <=8.3 | |
| Apple Safari | <=6.2.5 | |
| Apple Safari | =7.0 | |
| Apple Safari | =7.0.1 | |
| Apple Safari | =7.0.2 | |
| Apple Safari | =7.0.3 | |
| Apple Safari | =7.0.4 | |
| Apple Safari | =7.0.5 | |
| Apple Safari | =7.0.6 | |
| Apple Safari | =7.1.0 | |
| Apple Safari | =7.1.1 | |
| Apple Safari | =7.1.2 | |
| Apple Safari | =7.1.3 | |
| Apple Safari | =7.1.4 | |
| Apple Safari | =7.1.5 | |
| Apple Safari | =8.0.0 | |
| Apple Safari | =8.0.1 | |
| Apple Safari | =8.0.2 | |
| Apple Safari | =8.0.3 | |
| Apple Safari | =8.0.4 | |
| Apple Safari | =8.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/May/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
- http://support.apple.com/kb/HT204941
- http://www.securityfocus.com/bid/74527
- http://www.securitytracker.com/id/1032270
- http://www.ubuntu.com/usn/USN-2937-1
- https://support.apple.com/HT204826
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple iphone os
- version/apple iphone os/8.3
- canonical/apple safari
- version/apple safari/6.2.5
- version/apple safari/7.0
- version/apple safari/7.0.1
- version/apple safari/7.0.2
- version/apple safari/7.0.3
- version/apple safari/7.0.4
- version/apple safari/7.0.5
- version/apple safari/7.0.6
- version/apple safari/7.1.0
- version/apple safari/7.1.1
- version/apple safari/7.1.2
- version/apple safari/7.1.3
- version/apple safari/7.1.4
- version/apple safari/7.1.5
- version/apple safari/8.0.0
- version/apple safari/8.0.1
- version/apple safari/8.0.2
- version/apple safari/8.0.3
- version/apple safari/8.0.4
- version/apple safari/8.0.5