CVEvulnerability
CVE-2015-1084
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-17
Description
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
Affected configurations
• apple iphone os (<= 8.2)
• apple safari (<= 6.2.3)
• apple safari 7.0
• apple safari 7.0.1
• apple safari 7.0.2
• apple safari 7.0.3
• apple safari 7.0.4
• apple safari 7.0.5
• apple safari 7.0.6
• apple safari 7.1.0
• apple safari 7.1.1
• apple safari 7.1.2
• apple safari 7.1.3
• apple safari 8.0.0
• apple safari 8.0.1
• apple safari 8.0.2
• apple safari 8.0.3
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html Vendor Advisory
- http://www.securitytracker.com/id/1031936 www.securitytracker.com
- https://support.apple.com/HT204560 Vendor Advisory
- https://support.apple.com/HT204661 Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html Vendor Advisory
- http://www.securitytracker.com/id/1031936 www.securitytracker.com
- https://support.apple.com/HT204560 Vendor Advisory
- https://support.apple.com/HT204661 Vendor Advisory