Vulnerabilities > CVE-2015-1125 - Code vulnerability in Apple Iphone OS

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
apple
CWE-17
NVD
Published: 2015-04-10
Updated: 2015-09-11

Summary

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site.

Vulnerable Configurations

Part Description Count
OS
Apple
127

Common Weakness Enumeration (CWE)

References