PT-2015-2127
CVE-2015-5905
·
تاريخ النشر
2015-09-18
·
تاريخ التحديث
2016-12-22
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 9
Description
The issue is related to errors in security settings, allowing a remote attacker to exploit it and potentially spoof the relationship between URLs and web content. This can be achieved via a crafted window opener on a web site, enabling the attacker to substitute the content of web pages.
Recommendations
For versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the window opener feature on web sites until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾