CVE-2015-3801
18.09.2015, 10:59
The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 8.4.1 |
| apple | safari | 𝑥 ≤ 8.0.8 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qtwebkit-opensource-src |
| ||||||||||||
| qtwebkit-source |
| ||||||||||||
| webkit |
| ||||||||||||
| webkitgtk |
|
Common Weakness Enumeration
References