CVE-2015-1081

Advisory lineage Upstream: 0 Downstream: 3
Deferred
Published: 18 Mar 2015, 22:00
Last modified:06 Aug 2024, 04:33

Vulnerability Summary

Overall Risk (default)
medium
27/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
0.85% LOW
1% probability -0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Mar 2015, 22:00
Published
Vulnerability first disclosed
06 Aug 2024, 04:33
Last Modified
Vulnerability information updated

Description

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.85%• Percentile: 75%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • apple•iphone_os

    ≤ 8.2

  • apple•itunes

    ≤ 12.1

  • apple•safari

    ≤ 6.2.3 | 7.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.1.0 | 7.1.1 | 7.1.2 | 7.1.3 | 8.0.0 | 8.0.1 | 8.0.2 | 8.0.3

  • apple•tvos

    ≤ 7.1

References (11)