CVE-2015-3755 : WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other produ

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.

Published 2015-08-16 23:59:29

Updated 2019-02-07 19:51:49

Source Apple Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2015-3755

Probability of exploitation activity in the next 30 days: 0.38%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 70 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2015-3755

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2015-3755

CWE-254

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-3755

http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html

Apple - Lists.apple.com
Mailing List;Vendor Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1033274

Apple Safari Flaws Let Remote Users Bypass Security Controls, Obtain Potentially Sensitive Information, Spoof Interfaces and URLS, and Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/bid/76344

Apple Safari CVE-2015-3755 Muliple Security Bypass Vulnerabilities
Third Party Advisory;VDB Entry
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html

Apple - Lists.apple.com
Mailing List;Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT205030

About the security content of iOS 8.4.1 - Apple Support
Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html

openSUSE-SU-2016:0761-1: moderate: Security update for webkit2gtk3
Mailing List;Third Party Advisory

CVEs referencing this url
https://support.apple.com/kb/HT205033

About the security content of Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8 - Apple Support
Vendor Advisory

CVEs referencing this url

Products affected by CVE-2015-3755

Apple » Safari
Versions from including (>=) 7.0 and before (<) 7.1.8
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
Apple » Safari
Versions from including (>=) 6.0 and before (<) 6.2.8
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
Apple » Safari
Versions from including (>=) 8.0 and before (<) 8.0.8
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
Apple » Iphone Os
Versions before (<) 8.4.1
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2015-3755

Exploit prediction scoring system (EPSS) score for CVE-2015-3755

CVSS scores for CVE-2015-3755

CWE ids for CVE-2015-3755

References for CVE-2015-3755

Products affected by CVE-2015-3755