CVE-2015-3729 Other in n/a
Remote attackers can spoof input prompts in Safari by hiding the originating site, requiring user interaction to execute the attack.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2015-3729?
CVE-2015-3729 is a medium-severity vulnerability in Apple Safari, published on 16 Aug 2015. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what web site originated an input prompt, which allows remote attackers to conduct spoofing attacks via a crafted site.
Weakness: CWE-254
Which versions are affected by CVE-2015-3729?
It affects 1 product.
Products include Apple Safari.
How do I fix CVE-2015-3729?
No fix has been published for CVE-2015-3729 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-3729 being exploited?
There is no known exploitation of CVE-2015-3729 in the wild and no public exploit code.
Other vulnerabilities in Apple Safari
Sources
Also known as GHSA-fw58-f9hm-xghp.