Vulnerability Details : CVE-2015-1119
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
Vulnerability category: Memory CorruptionExecute codeDenial of service
Products affected by CVE-2015-1119
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-1119
2.67%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 90 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-1119
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
References for CVE-2015-1119
-
http://www.securitytracker.com/id/1032047
Apple Safari Multiple Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information - SecurityTracker
-
http://www.securityfocus.com/bid/73972
WebKit Multiple Unspecified Memory Corruption Vulnerabilities
-
https://support.apple.com/kb/HT204949
About the security content of iTunes 12.2 - Apple SupportPatch;Vendor Advisory
-
https://support.apple.com/HT204658
About the security content of Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 - Apple SupportVendor Advisory
-
https://support.apple.com/HT204662
About the security content of Apple TV 7.2 - Apple SupportVendor Advisory
-
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
Apple - Lists.apple.comVendor Advisory
-
http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html
Apple - Lists.apple.comVendor Advisory
-
http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
Apple - Lists.apple.comVendor Advisory
-
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Apple - Lists.apple.comVendor Advisory
-
https://support.apple.com/HT204661
About the security content of iOS 8.3 - Apple SupportVendor Advisory
Jump to