Details of VAR-201504-0146

ID

VAR-201504-0146

CVE

CVE-2015-1128

TITLE

Apple Safari Browsing history information vulnerability in private browsing implementation

Trust: 0.8

sources: JVNDB: JVNDB-2015-002179

DESCRIPTION

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests. Apple Safari is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose sensitive information that may aid in further attacks. Apple Safari is a web browser developed by Apple (Apple), and is the default browser included with Mac OS X and iOS operating systems. The following versions are affected: Apple Safari prior to 6.2.5, 7.x prior to 7.1.5, and 8.x prior to 8.0.5. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and address the following: Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 Impact: Users may be tracked by malicious websites using client certificates Description: An issue existed in Safari's client certificate matching for SSL authentication. This issue was addressed by improved matching of valid client certificates. CVE-ID CVE-2015-1129 : Stefan Kraus of fluid Operations AG, Sylvain Munaut of Whatever s.a. Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 Impact: Notifications preferences may reveal users' browsing history in private browsing mode Description: Responding to push notification requests in private browsing mode revealed users' browsing history. This issue was addressed by disabling push notification prompts in private browsing mode. CVE-ID CVE-2015-1128 : Joseph Winn of Credit Union Geek Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 Impact: Users' browsing history may not be completely purged Description: A state management issue existed in Safari that resulted in users' browsing history not being purged from history.plist. This issue was addressed by improved state management. CVE-ID CVE-2015-1112 : William Breuer, The Netherlands WebKit Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: Multiple memory corruption issues existed in WebKit. These issues were addressed through improved memory handling. CVE-ID CVE-2015-1119 : Renata Hodovan of University of Szeged / Samsung Electronics CVE-2015-1120 : Apple CVE-2015-1121 : Apple CVE-2015-1122 : Apple CVE-2015-1124 : Apple WebKit Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 Impact: Users' browsing history in private mode may be indexed Description: A state management issue existed in Safari that inadvertently indexed users' browsing history when in private browsing mode. This issue was addressed by improved state management. CVE-ID CVE-2015-1127 : Tyler C WebKit Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10.2 Impact: Visiting a maliciously crafted website may lead to resources of another origin being accessed Description: An issue existed in WebKit's credential handling for FTP URLs. This issue was addressed by improved URL decoding. CVE-ID CVE-2015-1126 : Jouko Pynnonen of Klikki Oy Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 may be obtained from the Mac App Store. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBAgAGBQJVJG6MAAoJEBcWfLTuOo7tL3cP/RVZlw3sp/ze1r1hSxcezN/Z w/uAPiqzud607Aqqwsg1YI4WzqCoIVLEb6N40eNGn7aTFkgOrBlYhsxTNHNnx2cM 3/HkDKMZo0bhO/fIqa9YfyG/KbgFKQMM0/eECNccEkQp6/DLHLJIwS0+QW0oBZ9q m9bBNTHFQxvJA9or3cn/eFV1zWVvr5RjpwR595tzWpYLIbIqTX901VAbBMOKvqtl 8b5NMmLNoEmfKGWWRqa5RmguFNnnANi3m+6PgU6fNU82dm8mif+ONDhDeyC43MH0 cxeeKZcWBGdYel9C/ctSF9SsnKhqAukIMoMppYLLL8AFHBPd504w1oXoS6UiE/go GrCXwzyxOklGQriyeMS/nsSn+AryJzQP3hXgWjAd8HuSIKCff9iaZBk5OxjK1Cwi k0zSx0qDJAHo1nlUhawYjQVhD7QEtkV7QO6hb4W22h5r/0MJGNuPsh9Mw2u6gIW6 l+p2x3D64xjfh+EclWerMhN+tqBR3RokkdkvNxhStdsz6dkA21ynaHMiaYN3lff7 DDINEP6dDiLi8AGP9P9pjYl3wMVgVTyFgMGL7cUMx8GIrm4pp8YAkhj2yWOM/ns0 Mycgrf+h0tFZYTvvojWlyo4rqx9J8te7dEiHjmg8l0OrOHXzmqQhDwOIWbH8fIGO CfE7FxlOHEHgzh+bzKvG =Df4l -----END PGP SIGNATURE-----

Trust: 2.07

sources: NVD: CVE-2015-1128 // JVNDB: JVNDB-2015-002179 // BID: 73975 // VULHUB: VHN-79088 // PACKETSTORM: 131358

AFFECTED PRODUCTS

vendor:	apple	model:	safari	scope:	eq	version:	8.0.1	Trust: 1.9
vendor:	apple	model:	safari	scope:	eq	version:	7.1.4	Trust: 1.9
vendor:	apple	model:	safari	scope:	eq	version:	7.1.1	Trust: 1.9
vendor:	apple	model:	safari	scope:	eq	version:	7.1.3	Trust: 1.9
vendor:	apple	model:	safari	scope:	eq	version:	7.1.2	Trust: 1.9
vendor:	apple	model:	safari	scope:	eq	version:	7.0.5	Trust: 1.9
vendor:	apple	model:	safari	scope:	eq	version:	7.1.0	Trust: 1.6
vendor:	apple	model:	safari	scope:	eq	version:	7.0.6	Trust: 1.6
vendor:	apple	model:	safari	scope:	eq	version:	8.0.0	Trust: 1.6
vendor:	apple	model:	safari	scope:	eq	version:	8.0.4	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	7.0.3	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	7.0.1	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	8.0.3	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	8.0.2	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	7.0.4	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	7.0.2	Trust: 1.3
vendor:	apple	model:	safari	scope:	eq	version:	7.0	Trust: 1.3
vendor:	apple	model:	safari	scope:	lte	version:	6.2.4	Trust: 1.0
vendor:	apple	model:	safari	scope:	eq	version:	6.2.4	Trust: 0.9
vendor:	apple	model:	safari	scope:	lt	version:	6.2.5 (os x mavericks v10.9.5)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	6.2.5 (os x mountain lion v10.8.5)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	6.2.5 (os x yosemite v10.10.2)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	7.1.5 (os x mavericks v10.9.5)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	7.1.5 (os x mountain lion v10.8.5)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	7.1.5 (os x yosemite v10.10.2)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	8.0.5 (os x mavericks v10.9.5)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	8.0.5 (os x mountain lion v10.8.5)	Trust: 0.8
vendor:	apple	model:	safari	scope:	lt	version:	8.0.5 (os x yosemite v10.10.2)	Trust: 0.8
vendor:	apple	model:	safari	scope:	eq	version:	7.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.2.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1.6	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.0.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.0.4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.0.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.0.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.0.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.10	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.6	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0.6	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.0.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.0.4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.0.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.0.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.0.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3.2.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3.1.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3.1.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	2.0.4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	2.0.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	2.0.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	2.0.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.3.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.3.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	1.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	8.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.2.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.2.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1.4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	6.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.34	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.33	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.31	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.7	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0.4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	5.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.31	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.30	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.28	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.1.3	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.1.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.1.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.1	Trust: 0.3
vendor:	apple	model:	safari beta	scope:	eq	version:	4.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4.0	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	4	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3.52	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3.1	Trust: 0.3
vendor:	apple	model:	safari	scope:	eq	version:	3	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.9.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.8.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.10.2	Trust: 0.3
vendor:	apple	model:	safari	scope:	ne	version:	8.0.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	ne	version:	7.1.5	Trust: 0.3
vendor:	apple	model:	safari	scope:	ne	version:	6.2.5	Trust: 0.3

sources: BID: 73975 // JVNDB: JVNDB-2015-002179 // CNNVD: CNNVD-201504-153 // NVD: CVE-2015-1128

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-1128
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2015-1128
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201504-153
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-79088
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2015-1128
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-79088
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-79088 // JVNDB: JVNDB-2015-002179 // CNNVD: CNNVD-201504-153 // NVD: CVE-2015-1128

PROBLEMTYPE DATA

problemtype:

CWE-200

Trust: 1.9

sources: VULHUB: VHN-79088 // JVNDB: JVNDB-2015-002179 // NVD: CVE-2015-1128

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201504-153

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201504-153

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-002179

PATCH

title:	APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5	url:	http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html	Trust: 0.8
title:	HT204658	url:	http://support.apple.com/en-us/HT204658	Trust: 0.8
title:	HT204658	url:	http://support.apple.com/ja-jp/HT204658	Trust: 0.8

sources: JVNDB: JVNDB-2015-002179

EXTERNAL IDS

db:	NVD	id:	CVE-2015-1128	Trust: 2.9
db:	SECTRACK	id:	1032047	Trust: 1.1
db:	JVN	id:	JVNVU91828320	Trust: 0.8
db:	JVNDB	id:	JVNDB-2015-002179	Trust: 0.8
db:	CNNVD	id:	CNNVD-201504-153	Trust: 0.6
db:	BID	id:	73975	Trust: 0.4
db:	VULHUB	id:	VHN-79088	Trust: 0.1
db:	PACKETSTORM	id:	131358	Trust: 0.1

sources: VULHUB: VHN-79088 // BID: 73975 // JVNDB: JVNDB-2015-002179 // PACKETSTORM: 131358 // CNNVD: CNNVD-201504-153 // NVD: CVE-2015-1128

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2015/apr/msg00000.html	Trust: 1.7
url:	https://support.apple.com/ht204658	Trust: 1.7
url:	http://www.securitytracker.com/id/1032047	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-1128	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu91828320/index.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-1128	Trust: 0.8
url:	https://www.apple.com/osx/	Trust: 0.3
url:	http://www.apple.com/safari/	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1127	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1122	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1120	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1121	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1112	Trust: 0.1
url:	https://www.apple.com/support/security/pgp/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1119	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1124	Trust: 0.1
url:	http://support.apple.com/kb/ht1222	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1128	Trust: 0.1
url:	http://gpgtools.org	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1126	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-1129	Trust: 0.1

sources: VULHUB: VHN-79088 // BID: 73975 // JVNDB: JVNDB-2015-002179 // PACKETSTORM: 131358 // CNNVD: CNNVD-201504-153 // NVD: CVE-2015-1128

CREDITS

Joseph Winn of Credit Union Geek

Trust: 0.3

sources: BID: 73975

SOURCES

db:	VULHUB	id:	VHN-79088
db:	BID	id:	73975
db:	JVNDB	id:	JVNDB-2015-002179
db:	PACKETSTORM	id:	131358
db:	CNNVD	id:	CNNVD-201504-153
db:	NVD	id:	CVE-2015-1128

LAST UPDATE DATE

2025-04-13T20:07:06.479000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-79088	date:	2015-09-11T00:00:00
db:	BID	id:	73975	date:	2015-04-08T00:00:00
db:	JVNDB	id:	JVNDB-2015-002179	date:	2015-04-14T00:00:00
db:	CNNVD	id:	CNNVD-201504-153	date:	2015-04-14T00:00:00
db:	NVD	id:	CVE-2015-1128	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-79088	date:	2015-04-10T00:00:00
db:	BID	id:	73975	date:	2015-04-08T00:00:00
db:	JVNDB	id:	JVNDB-2015-002179	date:	2015-04-14T00:00:00
db:	PACKETSTORM	id:	131358	date:	2015-04-09T16:23:44
db:	CNNVD	id:	CNNVD-201504-153	date:	2015-04-14T00:00:00
db:	NVD	id:	CVE-2015-1128	date:	2015-04-10T14:59:41.353