NetSight
medium6.8

CVE-2015-3727

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict ren…

Impact

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.

Affected products

VendorProductAffected versions
AppleSafari
through 6.2.6
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4
AppleIphone Os
through 8.3
AppleMac Os X
through 10.10.3

Weakness classification

References