PT-2015-5110

CVE-2015-1126

·

Publicado

2015-04-10

·

Atualizado

2016-03-25

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5
Description The issue is related to how WebKit handles the userinfo field in FTP URLs, allowing remote attackers to trigger incorrect resource access.
Recommendations For Apple iOS versions prior to 8.3, update to version 8.3 or later. For Apple Safari versions prior to 6.2.5, update to version 6.2.5 or later. For Apple Safari versions 7.x prior to 7.1.5, update to version 7.1.5 or later. For Apple Safari versions 8.x prior to 8.0.5, update to version 8.0.5 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
MGASA-2016-0116
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾