ID CVE-2015-3658
Summary The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.
References
Vulnerable Configurations
  • Apple Safari 6.2.6
    cpe:2.3:a:apple:safari:6.2.6
  • Apple Safari 7.0
    cpe:2.3:a:apple:safari:7.0
  • Apple Safari 7.0.1
    cpe:2.3:a:apple:safari:7.0.1
  • Apple Safari 7.0.2
    cpe:2.3:a:apple:safari:7.0.2
  • Apple Safari 7.0.3
    cpe:2.3:a:apple:safari:7.0.3
  • Apple Safari 7.0.4
    cpe:2.3:a:apple:safari:7.0.4
  • Apple Safari 7.0.5
    cpe:2.3:a:apple:safari:7.0.5
  • cpe:2.3:a:apple:safari:7.0.6
    cpe:2.3:a:apple:safari:7.0.6
  • cpe:2.3:a:apple:safari:7.1.0
    cpe:2.3:a:apple:safari:7.1.0
  • cpe:2.3:a:apple:safari:7.1.1
    cpe:2.3:a:apple:safari:7.1.1
  • cpe:2.3:a:apple:safari:7.1.2
    cpe:2.3:a:apple:safari:7.1.2
  • cpe:2.3:a:apple:safari:7.1.3
    cpe:2.3:a:apple:safari:7.1.3
  • Apple Safari 7.1.4
    cpe:2.3:a:apple:safari:7.1.4
  • Apple Safari 7.1.5
    cpe:2.3:a:apple:safari:7.1.5
  • Apple Safari 7.1.6
    cpe:2.3:a:apple:safari:7.1.6
  • Apple Safari 8.0
    cpe:2.3:a:apple:safari:8.0
  • cpe:2.3:a:apple:safari:8.0.1
    cpe:2.3:a:apple:safari:8.0.1
  • cpe:2.3:a:apple:safari:8.0.2
    cpe:2.3:a:apple:safari:8.0.2
  • cpe:2.3:a:apple:safari:8.0.3
    cpe:2.3:a:apple:safari:8.0.3
  • Apple Safari 8.0.4
    cpe:2.3:a:apple:safari:8.0.4
  • Apple Safari 8.0.5
    cpe:2.3:a:apple:safari:8.0.5
  • Apple Safari 8.0.6
    cpe:2.3:a:apple:safari:8.0.6
  • Apple Mac OS X 10.10.3
    cpe:2.3:o:apple:mac_os_x:10.10.3
  • Apple iPhone OS 8.3
    cpe:2.3:o:apple:iphone_os:8.3
CVSS
Base: 6.8 (as of 07-07-2015 - 13:53)
Impact:
Exploitability:
CWE CWE-254
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
nessus via4
  • NASL family MacOS X Local Security Checks
    NASL id MACOSX_SAFARI8_0_7.NASL
    description The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.7 / 7.1.7 / 8.0.7. It is, therefore, affected by the following vulnerabilities : - A flaw exists in WebKit Page Loading due to the Origin request header being preserved for cross-origin redirects. A remote attacker can exploit this, via a specially crafted web page, to circumvent cross-site request forgery (XSRF) protections. (CVE-2015-3658) - A flaw exists in the WebKit Storage's SQLite authorizer due to insufficient comparison. A remote attacker can exploit this, via a specially crafted web page, to invoke arbitrary SQL functions, resulting in a denial of service condition or executing arbitrary code. (CVE-2015-3659) - An information disclosure vulnerability exists in WebKit PDF due to improper restrictions, related to JavaScript execution, of links embedded in PDF files. A remote attacker can exploit this, via a specially crafted PDF file, to disclose sensitive information from the file system, including cookies. (CVE-2015-3660) - An information disclosure vulnerability exists in WebKit due to improper restrictions on renaming WebSQL tables. A remote attacker can exploit this, via a specially crafted website, to access WebSQL databases belonging to other websites. (CVE-2015-3727)
    last seen 2019-02-21
    modified 2018-07-14
    plugin id 84491
    published 2015-07-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=84491
    title Mac OS X : Apple Safari < 6.2.7 / 7.1.7 / 8.0.7 Multiple Vulnerabilities
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2016-5D6D75DBEA.NASL
    description This update addresses the following vulnerabilities : - CVE-2015-1120 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1120) - CVE-2015-1076 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1076) - CVE-2015-1071 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1071) - CVE-2015-1081 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1081) - CVE-2015-1122 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1122) - CVE-2015-1155 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1155) - CVE-2014-1748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1748) - CVE-2015-3752 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3752) - CVE-2015-5809 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5809) - CVE-2015-5928 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5928) - CVE-2015-3749 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3749) - CVE-2015-3659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3659) - CVE-2015-3748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3748) - CVE-2015-3743 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3743) - CVE-2015-3731 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3731) - CVE-2015-3745 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3745) - CVE-2015-5822 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5822) - CVE-2015-3658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3658) - CVE-2015-3741 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3741) - CVE-2015-3727 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3727) - CVE-2015-5801 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5801) - CVE-2015-5788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5788) - CVE-2015-3747 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3747) - CVE-2015-5794 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5794) - CVE-2015-1127 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1127) - CVE-2015-1153 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1153) - CVE-2015-1083 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1083) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-03-24
    plugin id 90104
    published 2016-03-23
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90104
    title Fedora 23 : webkitgtk-2.4.10-1.fc23 (2016-5d6d75dbea)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2016-9EC1850FFF.NASL
    description This update addresses the following vulnerabilities: * [CVE-2015-1120](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1120) * [CVE-2015-1076](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1076) * [CVE-2015-1071](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1071) * [CVE-2015-1081](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1081) * [CVE-2015-1122](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1122) * [CVE-2015-1155](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1155) * [CVE-2014-1748](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 4-1748) * [CVE-2015-3752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3752) * [CVE-2015-5809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-5809) * [CVE-2015-5928](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-5928) * [CVE-2015-3749](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3749) * [CVE-2015-3659](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3659) * [CVE-2015-3748](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3748) * [CVE-2015-3743](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3743) * [CVE-2015-3731](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3731) * [CVE-2015-3745](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3745) * [CVE-2015-5822](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-5822) * [CVE-2015-3658](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3658) * [CVE-2015-3741](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3741) * [CVE-2015-3727](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3727) * [CVE-2015-5801](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-5801) * [CVE-2015-5788](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-5788) * [CVE-2015-3747](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-3747) * [CVE-2015-5794](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-5794) * [CVE-2015-1127](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1127) * [CVE-2015-1153](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1153) * [CVE-2015-1083](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-201 5-1083) Additional fixes: * Fix crashes on PowerPC 64. * Fix the build on PowerPC 32. - Add ARM64 build support. Translation updates * German * Spanish * French - Italian * Korean * Brazilian Portuguese * Russian * Chinese. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-04-05
    plugin id 90283
    published 2016-04-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90283
    title Fedora 22 : webkitgtk-2.4.10-1.fc22 (2016-9ec1850fff)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2016-412.NASL
    description This update for webkitgtk fixes the following issues : - webkitgtk was updated to version 2.4.10 (boo#971460) : + Fix rendering of form controls and scrollbars with GTK+ >= 3.19. + Fix crashes on PPC64. + Fix the build on powerpc 32 bits. + Add ARM64 build support. + Security fixes: CVE-2015-1120, CVE-2015-1076, CVE-2015-1071, CVE-2015-1081, CVE-2015-1122, CVE-2015-1155, CVE-2014-1748, CVE-2015-3752, CVE-2015-5809, CVE-2015-5928, CVE-2015-3749, CVE-2015-3659, CVE-2015-3748, CVE-2015-3743, CVE-2015-3731, CVE-2015-3745, CVE-2015-5822, CVE-2015-3658, CVE-2015-3741, CVE-2015-3727, CVE-2015-5801, CVE-2015-5788, CVE-2015-3747, CVE-2015-5794, CVE-2015-1127, CVE-2015-1153, CVE-2015-1083. + Updated translations.
    last seen 2019-02-21
    modified 2016-04-05
    plugin id 90259
    published 2016-04-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90259
    title openSUSE Security Update : webkitgtk (openSUSE-2016-412)
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-2937-1.NASL
    description A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 90094
    published 2016-03-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90094
    title Ubuntu 14.04 LTS / 15.10 : webkitgtk vulnerabilities (USN-2937-1)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2016-FDE7FFCB77.NASL
    description This update addresses the following vulnerabilities : - CVE-2015-1120 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1120) - CVE-2015-1076 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1076) - CVE-2015-1071 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1071) - CVE-2015-1081 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1081) - CVE-2015-1122 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1122) - CVE-2015-1155 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1155) - CVE-2014-1748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1748) - CVE-2015-3752 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3752) - CVE-2015-5809 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5809) - CVE-2015-5928 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5928) - CVE-2015-3749 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3749) - CVE-2015-3659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3659) - CVE-2015-3748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3748) - CVE-2015-3743 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3743) - CVE-2015-3731 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3731) - CVE-2015-3745 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3745) - CVE-2015-5822 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5822) - CVE-2015-3658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3658) - CVE-2015-3741 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3741) - CVE-2015-3727 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3727) - CVE-2015-5801 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5801) - CVE-2015-5788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5788) - CVE-2015-3747 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3747) - CVE-2015-5794 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5794) - CVE-2015-1127 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1127) - CVE-2015-1153 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1153) - CVE-2015-1083 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1083) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-03-29
    plugin id 90232
    published 2016-03-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90232
    title Fedora 24 : webkitgtk3-2.4.10-1.fc24 (2016-fde7ffcb77)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2016-A4FCB02D6B.NASL
    description This update addresses the following vulnerabilities : - CVE-2015-1120 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1120) - CVE-2015-1076 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1076) - CVE-2015-1071 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1071) - CVE-2015-1081 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1081) - CVE-2015-1122 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1122) - CVE-2015-1155 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1155) - CVE-2014-1748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1748) - CVE-2015-3752 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3752) - CVE-2015-5809 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5809) - CVE-2015-5928 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5928) - CVE-2015-3749 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3749) - CVE-2015-3659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3659) - CVE-2015-3748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3748) - CVE-2015-3743 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3743) - CVE-2015-3731 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3731) - CVE-2015-3745 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3745) - CVE-2015-5822 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5822) - CVE-2015-3658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3658) - CVE-2015-3741 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3741) - CVE-2015-3727 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3727) - CVE-2015-5801 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5801) - CVE-2015-5788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5788) - CVE-2015-3747 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3747) - CVE-2015-5794 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5794) - CVE-2015-1127 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1127) - CVE-2015-1153 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1153) - CVE-2015-1083 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1083) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-03-29
    plugin id 90220
    published 2016-03-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90220
    title Fedora 24 : webkitgtk-2.4.10-1.fc24 (2016-a4fcb02d6b)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2016-1A7F7FFB58.NASL
    description This update addresses the following vulnerabilities : - CVE-2015-1120 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1120) - CVE-2015-1076 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1076) - CVE-2015-1071 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1071) - CVE-2015-1081 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1081) - CVE-2015-1122 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1122) - CVE-2015-1155 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1155) - CVE-2014-1748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1748) - CVE-2015-3752 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3752) - CVE-2015-5809 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5809) - CVE-2015-5928 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5928) - CVE-2015-3749 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3749) - CVE-2015-3659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3659) - CVE-2015-3748 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3748) - CVE-2015-3743 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3743) - CVE-2015-3731 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3731) - CVE-2015-3745 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3745) - CVE-2015-5822 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5822) - CVE-2015-3658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3658) - CVE-2015-3741 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3741) - CVE-2015-3727 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3727) - CVE-2015-5801 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5801) - CVE-2015-5788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5788) - CVE-2015-3747 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3747) - CVE-2015-5794 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5794) - CVE-2015-1127 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1127) - CVE-2015-1153 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1153) - CVE-2015-1083 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1083) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2016-03-22
    plugin id 90035
    published 2016-03-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=90035
    title Fedora 23 : webkitgtk3-2.4.10-1.fc23 (2016-1a7f7ffb58)
refmap via4
apple
  • APPLE-SA-2015-06-30-1
  • APPLE-SA-2015-06-30-4
bid 75492
confirm
sectrack 1032754
suse openSUSE-SU-2016:0915
ubuntu USN-2937-1
Last major update 27-12-2016 - 21:59
Published 02-07-2015 - 21:59
Back to Top