PT-2015-1912

CVE-2015-5759

Publicado

2015-08-06

Atualizado

2016-12-24

Descrição por

CVSS 2.0

5.0

Média

MétricasAV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 8.4.1

Description The issue is related to errors in security settings of the WebKit component in the iOS operating system. It allows remote attackers to spoof clicks via a crafted web site that leverages tap events, potentially enabling an attacker to substitute URL link clicks.

Recommendations For iOS versions prior to 8.4.1, update to version 8.4.1 or later to resolve the issue.

Explorabilidade

Correção

Pesquisadores

Matt Weston

Phillip Moon

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-254

Identificadores relacionados

CVE-2015-5759