CVE-2015-1155 in Safari
Zusammenfassung (Englisch)
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
16.01.2015
Veröffentlichung
07.05.2015
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 75215 | Apple Safari WebKit History File System erweiterte Rechte | 264 | High | Offizieller Fix | CVE-2015-1155 |