CVE-2015-3729

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what web site originated an input prompt, which allows remote attackers to conduct spoofing attacks via a crafted site.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-254

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlMailing List, Vendor Advisory
http://www.securityfocus.com/bid/76342Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033274Third Party Advisory, VDB Entry
https://support.apple.com/kb/HT205030Vendor Advisory
https://support.apple.com/kb/HT205033Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlMailing List, Vendor Advisory
http://www.securityfocus.com/bid/76342Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033274Third Party Advisory, VDB Entry
https://support.apple.com/kb/HT205030Vendor Advisory
https://support.apple.com/kb/HT205033Vendor Advisory

Timeline

Published: Aug 16, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015