CVE-2015-1155
CVE-2015-1155
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.
EPSS 10.9% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
webkitgtk Ubuntu:14.04:LTS
- Versions
- 2.2.1-2ubuntu2
- 2.3.2-1ubuntu2
- 2.3.2-1ubuntu3
- 2.3.2-1ubuntu4
- 2.3.2-1ubuntu5
- 2.3.2-1ubuntu6
- 2.3.4-1ubuntu2
- 2.3.90-1ubuntu1
- 2.3.91-0ubuntu1
- 2.4.0-1ubuntu2
- 2.4.2-1ubuntu0.1
- 2.4.3-1ubuntu2
- 2.4.4-1~ubuntu1
- 2.4.7-1~ubuntu1
- 2.4.8-1ubuntu1~ubuntu14.04.1
- Affected ranges
- ECOSYSTEM: < 2.4.10-0ubuntu0.14.04.1
Update to 2.4.10-0ubuntu0.14.04.1
webkitgtk Ubuntu:16.04:LTS
- Versions
- 2.4.9-2ubuntu2
- Affected ranges
- ECOSYSTEM: < 2.4.10-0ubuntu1
Update to 2.4.10-0ubuntu1
qtwebkit-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2+dfsg-1ubuntu2.1
- 5.5.1+dfsg-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-source Ubuntu:16.04:LTS
- Versions
- 2.3.2-0ubuntu10
- 2.3.2-0ubuntu11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://support.apple.com/HT204826
- http://support.apple.com/kb/HT204941
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://www.securitytracker.com/id/1032270
- http://www.securityfocus.com/bid/74527
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/May/msg00000.html
- http://www.ubuntu.com/usn/USN-2937-1
- https://nvd.nist.gov/vuln/detail/CVE-2015-1155