Lucene search
AppleCVE-2015-1084HistoryMar 18, 2015 - 10:59 p.m.
CVE-2015-1084
2015-03-1822:59:15
CWE-17
apple
web.nvd.nist.gov
33
cve-2015-1084
webkit
apple safari
url display inconsistency
phishing attack
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
Low
EPSS
0.004
Percentile
73.7%
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
Affected configurations
Node
appleiphone_osRange≤8.2
Node
applesafariRange≤6.2.3
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
ORapplesafariMatch7.0.3
ORapplesafariMatch7.0.4
ORapplesafariMatch7.0.5
ORapplesafariMatch7.0.6
ORapplesafariMatch7.1.0
ORapplesafariMatch7.1.1
ORapplesafariMatch7.1.2
ORapplesafariMatch7.1.3
ORapplesafariMatch8.0.0
ORapplesafariMatch8.0.1
ORapplesafariMatch8.0.2
ORapplesafariMatch8.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| apple | safari | 7.0 | cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:* |
| apple | safari | 7.0.1 | cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:* |
| apple | safari | 7.0.2 | cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:* |
| apple | safari | 7.0.3 | cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:* |
| apple | safari | 7.0.4 | cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:* |
| apple | safari | 7.0.5 | cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:* |
| apple | safari | 7.0.6 | cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:* |
| apple | safari | 7.1.0 | cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2015-1084
2015-03-18 22:59:15
prion
prion
Code injection
2015-03-18 22:59:00
cvelist
cvelist
CVE-2015-1084
2015-03-18 22:00:00
securityvulns
securityvulns
APPLE-SA-2015-03-17-1 Safari 8.0.4, Safari 7.1.4, and Safari 6.2.4
2015-03-18 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2015-03-18 00:00:00
APPLE-SA-2015-04-08-3 iOS 8.3
2015-04-17 00:00:00
nessus
nessus
Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities
2015-04-17 00:00:00
Mac OS X : Apple Safari < 6.2.4 / 7.1.4 / 8.0.4 Multiple Vulnerabilities
2015-03-18 00:00:00
openvas
openvas
Apple Safari 'Webkit' Multiple Vulnerabilities -01 (Mar 2015) - Mac OS X
2015-03-27 00:00:00
kaspersky
kaspersky
KLA10466 Multiple vulnerabilities in Apple Safari
2015-03-17 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
Low
EPSS
0.004
Percentile
73.7%
Related for CVE-2015-1084