CVE-2015-1084

The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - product-security@apple.com

Published

2015-03-18

Last modified

2024-08-06

Weaknesses

CWE-17

Affected products

• Iphone Os (Apple)
• Safari (Apple)

References

• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html
• http://www.securitytracker.com/id/1031936
• https://support.apple.com/HT204560
• https://support.apple.com/HT204661