CVE-2015-3755
First published: Sun Aug 16 2015(Updated: )
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mobile Safari | >=6.0<6.2.8 | |
| Apple Mobile Safari | >=7.0<7.1.8 | |
| Apple Mobile Safari | >=8.0<8.0.8 | |
| iStyle @cosme iPhone OS | <8.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://www.securityfocus.com/bid/76344
- http://www.securitytracker.com/id/1033274
- https://support.apple.com/kb/HT205030
- https://support.apple.com/kb/HT205033
Frequently Asked Questions
What is the severity of CVE-2015-3755?
CVE-2015-3755 has been assigned a high severity rating due to its potential for user interface spoofing.
How do I fix CVE-2015-3755?
To address CVE-2015-3755, update your version of Apple Safari to 6.2.8, 7.1.8, or 8.0.8, or upgrade to a later version.
Which Apple products are affected by CVE-2015-3755?
CVE-2015-3755 affects Apple Safari versions before 6.2.8, 7.1.8, and 8.0.8, as well as iOS versions prior to 8.4.1.
What kind of attack does CVE-2015-3755 enable?
CVE-2015-3755 allows remote attackers to spoof the user interface via a malformed URL.
Is there a workaround for CVE-2015-3755?
There is no official workaround for CVE-2015-3755; the recommended solution is to apply the security updates.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple mobile safari
- version/apple mobile safari/6.0
- version/apple mobile safari/7.0
- version/apple mobile safari/8.0
- canonical/istyle @cosme iphone os