09 Avr 2015

CVE-2015-1120

Publié par . Publié dans Memory corruption

Vulnerability Details : CVE-2015-1120

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
Publish Date : 2015-04-10 Last Update Date : 2015-04-10

- CVSS Scores & Vulnerability Types

CVSS Score	6.8
Confidentiality Impact	Partial(There is considerable informational disclosure.)
Integrity Impact	Partial(Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	Partial(There is reduced performance or interruptions in resource availability.)
Access Complexity	Medium(The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required(Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Denial Of ServiceExecute CodeMemory corruption
CWE ID	CWE id is not defined for this vulnerability

- Products Affected By CVE-2015-1120

#	Product Type	Vendor	Product	Version
1	Application	Apple	Apple Tv	7.1	Version Details Vulnerabilities
2	OS	Apple	Iphone Os	8.2	Version Details Vulnerabilities
3	Application	Apple	Safari	6.2.4	Version Details Vulnerabilities
4	Application	Apple	Safari	7.0	Version Details Vulnerabilities
5	Application	Apple	Safari	7.0.1	Version Details Vulnerabilities
6	Application	Apple	Safari	7.0.2	Version Details Vulnerabilities
7	Application	Apple	Safari	7.0.3	Version Details Vulnerabilities
8	Application	Apple	Safari	7.0.4	Version Details Vulnerabilities
9	Application	Apple	Safari	7.0.5	Version Details Vulnerabilities
10	Application	Apple	Safari	7.0.6	Version Details Vulnerabilities
11	Application	Apple	Safari	7.1.0	Version Details Vulnerabilities
12	Application	Apple	Safari	7.1.1	Version Details Vulnerabilities
13	Application	Apple	Safari	7.1.2	Version Details Vulnerabilities
14	Application	Apple	Safari	7.1.3	Version Details Vulnerabilities
15	Application	Apple	Safari	7.1.4	Version Details Vulnerabilities
16	Application	Apple	Safari	8.0.0	Version Details Vulnerabilities
17	Application	Apple	Safari	8.0.1	Version Details Vulnerabilities
18	Application	Apple	Safari	8.0.2	Version Details Vulnerabilities
19	Application	Apple	Safari	8.0.3	Version Details Vulnerabilities
20	Application	Apple	Safari	8.0.4	Version Details Vulnerabilities