CVE-2015-3659

MEDIO 6.8CVE-2015-3659 · Published 03/07/2015 · updated 17/06/2026

En resumen

CVE-2015-3659 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a safari (apple).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 86.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
safari apple	`= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.1.5= 7.1.6= 8.0= 8.0.1= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.6≤ 6.2.6`	No fix yet

Description

The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

References

lists.apple.com/archives/security-announce/2015/Jun/msg00001.html · Vendor Advisory
lists.apple.com/archives/security-announce/2015/Jun/msg00004.html · Vendor Advisory
lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
support.apple.com/kb/HT204941 · Vendor Advisory
support.apple.com/kb/HT204950 · Vendor Advisory
securityfocus.com/bid/75492
securitytracker.com/id/1032754
ubuntu.com/usn/USN-2937-1

Más vulnerabilidades de safari

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 7.1.4= 7.1.5= 7.1.6= 8.0= 8.0.1= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.6≤ 6.2.6

No fix yet

Description

Más vulnerabilidades de safari

Ver todo →