Vulnerability CVE-2015-3659: Information

Description

The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Severity: MEDIUM (6.8)

URL: https://nvd.nist.gov/vuln/detail/CVE-2015-3659
Published: July 3, 2015
Modified: Dec. 28, 2016
Error type identifier: CWE-264

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
libwebkitgtk2p102.4.11-alt12.4.11-alt13ALT-PU-2016-1315-1162826Fixed
libwebkitgtk2p92.4.11-alt12.4.11-alt10ALT-PU-2016-1315-1162826Fixed
libwebkitgtk2c10f12.4.11-alt12.4.11-alt13ALT-PU-2016-1315-1162826Fixed
libwebkitgtk2c9f22.4.11-alt12.4.11-alt10ALT-PU-2016-1315-1162826Fixed
libwebkitgtk3p102.4.10-alt12.4.11-alt12ALT-PU-2016-1245-1161352Fixed
libwebkitgtk3p92.4.10-alt12.4.11-alt9.1.p9ALT-PU-2016-1245-1161352Fixed
libwebkitgtk3c10f12.4.10-alt12.4.11-alt12ALT-PU-2016-1245-1161352Fixed
libwebkitgtk3c9f22.4.10-alt12.4.11-alt9.1.p9ALT-PU-2016-1245-1161352Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://support.apple.com/kb/HT204950
  • Vendor Advisory
APPLE-SA-2015-06-30-1
  • Vendor Advisory
APPLE-SA-2015-06-30-4
  • Vendor Advisory
http://support.apple.com/kb/HT204941
  • Vendor Advisory
75492
    openSUSE-SU-2016:0915
      USN-2937-1
        1032754

            1. Configuration 1

              cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
              End including
              10.10.3
              cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
              End including
              8.3

              Configuration 2

              cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0.1:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.6:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0.6:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.5:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.3:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.4:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0.3:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0.5:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0.4:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
              End including
              6.2.6
              cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*
              cpe:2.3:a:apple:safari:8.0:*:*:*:*:*:*:*
          VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
          Version: v24.5.0
          Back to top