CVEvulnerability
CVE-2015-3727
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-07-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.
Affected configurations
• apple safari (<= 6.2.6)
• apple safari 7.0
• apple safari 7.0.1
• apple safari 7.0.2
• apple safari 7.0.3
• apple safari 7.0.4
• apple safari 7.0.5
• apple safari 7.0.6
• apple safari 7.1.0
• apple safari 7.1.1
• apple safari 7.1.2
• apple safari 7.1.3
• apple safari 7.1.4
• apple safari 7.1.5
• apple safari 7.1.6
• apple safari 8.0
• apple safari 8.0.1
• apple safari 8.0.2
• apple safari 8.0.3
• apple safari 8.0.4
• apple safari 8.0.5
• apple safari 8.0.6
• apple iphone os (<= 8.3)
• apple mac os x (<= 10.10.3)
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html lists.opensuse.org
- http://support.apple.com/kb/HT204941 Vendor Advisory
- http://support.apple.com/kb/HT204950 Vendor Advisory
- http://www.securityfocus.com/bid/75492 www.securityfocus.com
- http://www.securitytracker.com/id/1032754 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2937-1 www.ubuntu.com
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html lists.opensuse.org
- http://support.apple.com/kb/HT204941 Vendor Advisory
- http://support.apple.com/kb/HT204950 Vendor Advisory
- http://www.securityfocus.com/bid/75492 www.securityfocus.com
- http://www.securitytracker.com/id/1032754 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-2937-1 www.ubuntu.com