CVE-2015-3751
16.08.2015, 23:59
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an IMG element within an OBJECT element.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 6.0 ≤ 𝑥 < 6.2.8 |
| apple | safari | 7.0 ≤ 𝑥 < 7.1.8 |
| apple | safari | 8.0 ≤ 𝑥 < 8.0.8 |
| apple | iphone_os | 𝑥 < 8.4.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qtwebkit-opensource-src |
| ||||||||||||
| qtwebkit-source |
| ||||||||||||
| webkit |
| ||||||||||||
| webkitgtk |
|
Common Weakness Enumeration
References