CVE-2015-3731 Detail
Current Description
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Source:
MITRE
View Analysis Description
Analysis Description
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Source:
MITRE
Severity
CVSS 3.x Severity and Metrics:
NVD score not yet provided.
CVSS 2.0 Severity and Metrics:
Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to nvd@nist.gov.
Weakness Enumeration
CWE-ID |
CWE Name |
Source |
CWE-119 |
Improper Restriction of Operations within the Bounds of a Memory Buffer |
NIST
|
Change History
10 change records found
- show changes
Modified Analysis -
2/8/2019 11:46:29 AM
Action |
Type |
Old Value |
New Value |
Added |
CPE Configuration |
|
OR
*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (excluding) 8.4.1 |
Added |
CPE Configuration |
|
OR
*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
*cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* |
Changed |
CPE Configuration |
OR
*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* versions up to (including) 6.2.7
*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* versions up to (including) 7.1.7
*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* versions up to (including) 8.0.7 |
OR
*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* versions from (including) 6.0 up to (excluding) 6.2.8
*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* versions from (including) 7.0 up to (excluding) 7.1.8
*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* versions from (including) 8.0 up to (excluding) 8.0.8 |
Removed |
CPE Configuration |
OR
*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (including) 8.4 |
|
Changed |
Reference Type |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html Mailing List, Vendor Advisory |
Changed |
Reference Type |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html Mailing List, Vendor Advisory |
Changed |
Reference Type |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html Patch, Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html Mailing List, Patch, Vendor Advisory |
Changed |
Reference Type |
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html No Types Assigned |
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html Mailing List, Third Party Advisory |
Changed |
Reference Type |
http://www.securityfocus.com/bid/76338 No Types Assigned |
http://www.securityfocus.com/bid/76338 Third Party Advisory, VDB Entry |
Changed |
Reference Type |
http://www.securitytracker.com/id/1033274 No Types Assigned |
http://www.securitytracker.com/id/1033274 Third Party Advisory, VDB Entry |
Changed |
Reference Type |
http://www.ubuntu.com/usn/USN-2937-1 No Types Assigned |
http://www.ubuntu.com/usn/USN-2937-1 Third Party Advisory |
CVE Modified by MITRE -
12/23/2016 9:59:12 PM
Action |
Type |
Old Value |
New Value |
Added |
Reference |
|
http://www.securitytracker.com/id/1033274 [No Types Assigned] |
CVE Modified by MITRE -
12/2/2016 10:09:35 PM
Action |
Type |
Old Value |
New Value |
Added |
Reference |
|
http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html [No Types Assigned] |
Added |
Reference |
|
http://www.ubuntu.com/usn/USN-2937-1 [No Types Assigned] |
CVE Modified by MITRE -
11/28/2016 2:25:27 PM
Action |
Type |
Old Value |
New Value |
Added |
Reference |
|
http://www.securityfocus.com/bid/76338 [No Types Assigned] |
Modified Analysis -
9/24/2015 7:02:43 PM
Action |
Type |
Old Value |
New Value |
Changed |
CPE Configuration |
Configuration 1
OR
*cpe:2.3:o:apple:iphone_os:8.4:*:*:*:*:*:*:* (and previous)
Configuration 2
OR
*cpe:2.3:a:apple:safari:6.2.7:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:apple:safari:7.1.7:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:apple:safari:8.0.7:*:*:*:*:*:*:* (and previous) |
Configuration 1
OR
*cpe:2.3:o:apple:iphone_os:8.4:*:*:*:*:*:*:* (and previous)
Configuration 2
OR
*cpe:2.3:a:apple:itunes:12.2:*:*:*:*:*:*:* (and previous)
Configuration 3
OR
*cpe:2.3:a:apple:safari:6.2.7:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:apple:safari:7.1.7:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:apple:safari:8.0.7:*:*:*:*:*:*:* (and previous) |
Changed |
Reference Type |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html No Types Assigned |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html Advisory |
Changed |
Reference Type |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html No Types Assigned |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html Advisory |
Changed |
Reference Type |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html No Types Assigned |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html Advisory, Patch |
Changed |
Reference Type |
https://support.apple.com/HT205221 No Types Assigned |
https://support.apple.com/HT205221 Advisory |
CVE Modified by Source -
9/18/2015 10:00:24 PM
Action |
Type |
Old Value |
New Value |
Added |
Reference |
|
http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html |
Added |
Reference |
|
https://support.apple.com/HT205221 |
CVE Translated -
8/27/2015 7:45:20 AM
Action |
Type |
Old Value |
New Value |
Added |
Translation |
|
Record truncated, showing 500 of 553 characters.
View Entire Change Record
Vulnerabilidad en WebKit, tal como se utiliza en Apple iOS en versiones anteriores a 8.4.1 y en Safari en versiones anteriores a 6.2.8, 7.x en versiones anteriores a 7.1.8 y 8.x en versiones anteriores a 8.0.8, permite a atacantes remotos ejecutar código arbitrario o causar denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web manipulado, una vulnerabilidad diferente a otras CVEs WebKit list |
Removed |
Translation |
Record truncated, showing 500 of 556 characters.
View Entire Change Record
Vulnerabilidad en WebKit, tal como se utiliza en Apple iOS en versiones anteriores a 8.4.1 y en Safari en versiones anteriores a 6.2.8, en versión 7.x anteriores a la 7.1.8, en versión 8.x anteriores a 8.0.8, permite a atacantes remotos ejecutar código arbitrario o causar denegación de servicio (corrupción de memoria y caída de aplicación) a través de un sitio web, una vulnerabilidad diferente a los WebKit li |
|
Modified Analysis -
8/18/2015 3:44:35 AM
Action |
Type |
Old Value |
New Value |
Added |
CPE Configuration |
|
Configuration 1
OR
*cpe:2.3:o:apple:iphone_os:8.4:*:*:*:*:*:*:* (and previous)
Configuration 2
OR
*cpe:2.3:a:apple:safari:6.2.7:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:apple:safari:7.1.7:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:apple:safari:8.0.7:*:*:*:*:*:*:* (and previous) |
Added |
CVSS V2 |
|
(AV:N/AC:M/Au:N/C:P/I:P/A:P) |
Added |
CWE |
|
CWE-119 |
Changed |
Reference Type |
https://support.apple.com/kb/HT205030 No Types Assigned |
https://support.apple.com/kb/HT205030 Advisory |
Changed |
Reference Type |
https://support.apple.com/kb/HT205033 No Types Assigned |
https://support.apple.com/kb/HT205033 Advisory |
Initial CVE Analysis -
8/17/2015 1:32:06 PM
Initial CVE Analysis -
8/17/2015 1:25:26 PM
Quick Info
CVE Dictionary Entry:
CVE-2015-3731
NVD Published Date:
08/16/2015
NVD Last Modified:
02/08/2019
|