CVE-2015-3751 — Apple Iphone OS vulnerability

CWE-2546 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
1.6%
top 18.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple Iphone OSApple SafariApple TV+2 more
Timeline
PublishedAug 16
Latest updateMay 14

Description

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an IMG element within an OBJECT element.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶NVDapple/safari6.0 — 6.2.8+2
▶NVDapple/iphone_os< 8.4.1
▶Appleapple/ios8.4.1
▶Appleapple/apple_tv7.2.1

🔴Vulnerability Details

2
GHSA
GHSA-6fp9-pg9h-pr6m: WebKit in Apple Safari before 6↗2022-05-14
▶
OSV
CVE-2015-3751: WebKit in Apple Safari before 6↗2015-08-16
▶

📋Vendor Advisories

3
Apple
CVE-2015-3751: iOS 8.4.1↗
▶
Apple
CVE-2015-3751: Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8↗
▶
Apple
CVE-2015-3751: Apple TV 7.2.1↗
▶
CVE-2015-3751 — Apple Iphone OS vulnerability | cvebase