Vulnerability Description
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | <= 8.2 |
| Apple | Tvos | <= 7.1 |
| Apple | Safari | <= 6.2.4 |
| Apple | Itunes | <= 12.1 |
References
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.htmlVendor Advisory
- http://www.securityfocus.com/bid/73972
- http://www.securitytracker.com/id/1032047
- https://support.apple.com/HT204658Vendor Advisory
- https://support.apple.com/HT204661Vendor Advisory
- https://support.apple.com/HT204662Vendor Advisory
- https://support.apple.com/kb/HT204949PatchVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.htmlVendor Advisory
- http://www.securityfocus.com/bid/73972
FAQ
What is CVE-2015-1119?
CVE-2015-1119 is a vulnerability with a CVSS score of 6.8 (MEDIUM). WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial...
How severe is CVE-2015-1119?
CVE-2015-1119 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1119?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os, Apple Tvos, Apple Safari, Apple Itunes.