PT-2015-6325

CVE-2015-3727

·

Publicado

2015-07-01

·

Atualizado

2024-06-15

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apple Safari versions 6.2.7 and earlier, 7.x through 7.1.6, and 8.x through 8.0.6 Apple iOS versions prior to 8.4
Description The issue allows remote attackers to access an arbitrary web site's database via a crafted web site, due to improper restriction of rename operations on WebSQL tables.
Recommendations For Apple Safari versions 6.2.7 and earlier, update to version 6.2.7 or later. For Apple Safari 7.x through 7.1.6, update to version 7.1.7 or later. For Apple Safari 8.x through 8.0.6, update to version 8.0.7 or later. For Apple iOS versions prior to 8.4, update to version 8.4 or later.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALT-PU-2016-1245
ALT-PU-2016-1315
MGASA-2016-0116
MGASA-2016-0120
OPENSUSE-SU-2024:10461-1
USN-2937-1
ZDI-15-281
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾