CVE Vulnerabilities

CVE-2015-1125

Published: Apr 10, 2015 | Modified: Sep 11, 2015
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site.

Affected Software

Name Vendor Start Version End Version
Iphone_os Apple * 8.2 (including)
Qtwebkit-opensource-src Ubuntu devel *
Qtwebkit-opensource-src Ubuntu esm-infra/xenial *
Qtwebkit-opensource-src Ubuntu trusty *
Qtwebkit-opensource-src Ubuntu utopic *
Qtwebkit-opensource-src Ubuntu vivid *
Qtwebkit-opensource-src Ubuntu wily *
Qtwebkit-opensource-src Ubuntu xenial *
Qtwebkit-opensource-src Ubuntu yakkety *
Qtwebkit-source Ubuntu devel *
Qtwebkit-source Ubuntu esm-apps/xenial *
Qtwebkit-source Ubuntu precise *
Qtwebkit-source Ubuntu trusty *
Qtwebkit-source Ubuntu utopic *
Qtwebkit-source Ubuntu vivid *
Qtwebkit-source Ubuntu wily *
Qtwebkit-source Ubuntu xenial *
Qtwebkit-source Ubuntu yakkety *
Webkit Ubuntu lucid *
Webkit Ubuntu precise *
Webkitgtk Ubuntu devel *
Webkitgtk Ubuntu esm-apps/xenial *
Webkitgtk Ubuntu trusty *
Webkitgtk Ubuntu utopic *
Webkitgtk Ubuntu vivid *
Webkitgtk Ubuntu wily *
Webkitgtk Ubuntu xenial *
Webkitgtk Ubuntu yakkety *

References