CVE-2015-1155
NoneCVSS
—
EPSS
10.9%
Published
May 8, 2015
CISA due date
—
The record
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:5 | webkit | 0 | 2.4.10-1.mga5 |
| Mageia:5 | webkit2 | 0 | 2.10.9-1.mga5 |
| Ubuntu:14.04:LTS | webkitgtk | 0 | 2.4.10-0ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | qtwebkit-opensource-src | 0 | No fix |
| Ubuntu:16.04:LTS | qtwebkit-source | 0 | No fix |
| Ubuntu:16.04:LTS | webkitgtk | 0 | 2.4.10-0ubuntu1 |
| Ubuntu:Pro:16.04:LTS | qtwebkit-opensource-src | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | qtwebkit-source | 0 | No fix |
| openSUSE:Tumbleweed | gtk3 | 0 | 2.4.11-3.3 |
Related vulnerabilities
- CVE-2014-1748 The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in… Also affects webkit
- CVE-2017-2350 An issue was discovered in certain Apple products. Also affects webkit2
- CVE-2016-7586 An issue was discovered in certain Apple products. Also affects webkit2
- CVE-2016-4613 An issue was discovered in certain Apple products. Also affects webkit2
- CVE-2016-4657 WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or… Also affects webkit2
- CVE-2016-4622 WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows… Also affects webkit2
- CVE-2016-1854 WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1… Also affects webkit2
- CVE-2012-3748 Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote… Also affects webkitgtk