[webkit-gtk] WebKitGTK+ Security Advisory WSA-2015-0002

Carlos Alberto Lopez Perez clopez at igalia.com
Mon Dec 28 10:35:00 PST 2015


------------------------------------------------------------------------
WebKitGTK+ Security Advisory                               WSA-2015-0002
------------------------------------------------------------------------

Date reported      : December 28, 2015
Advisory ID        : WSA-2015-0002
Advisory URL       : http://webkitgtk.org/security/WSA-2015-0002.html
CVE identifiers    : CVE-2013-6663, CVE-2014-1748, CVE-2014-3192,
                     CVE-2014-4409, CVE-2014-4410, CVE-2014-4411,
                     CVE-2014-4412, CVE-2014-4413, CVE-2014-4414,
                     CVE-2014-4452, CVE-2014-4459, CVE-2014-4465,
                     CVE-2014-4466, CVE-2014-4468, CVE-2014-4469,
                     CVE-2014-4470, CVE-2014-4471, CVE-2014-4472,
                     CVE-2014-4473, CVE-2014-4474, CVE-2014-4475,
                     CVE-2014-4476, CVE-2014-4477, CVE-2014-4479,
                     CVE-2015-1068, CVE-2015-1069, CVE-2015-1070,
                     CVE-2015-1071, CVE-2015-1072, CVE-2015-1073,
                     CVE-2015-1074, CVE-2015-1075, CVE-2015-1076,
                     CVE-2015-1077, CVE-2015-1080, CVE-2015-1081,
                     CVE-2015-1082, CVE-2015-1083, CVE-2015-1084,
                     CVE-2015-1119, CVE-2015-1120, CVE-2015-1121,
                     CVE-2015-1122, CVE-2015-1124, CVE-2015-1126,
                     CVE-2015-1127, CVE-2015-1152, CVE-2015-1153,
                     CVE-2015-1154, CVE-2015-1155, CVE-2015-1156,
                     CVE-2015-2330, CVE-2015-3658, CVE-2015-3659,
                     CVE-2015-3660, CVE-2015-3727, CVE-2015-3730,
                     CVE-2015-3731, CVE-2015-3732, CVE-2015-3733,
                     CVE-2015-3734, CVE-2015-3735, CVE-2015-3736,
                     CVE-2015-3737, CVE-2015-3738, CVE-2015-3739,
                     CVE-2015-3740, CVE-2015-3741, CVE-2015-3742,
                     CVE-2015-3743, CVE-2015-3744, CVE-2015-3745,
                     CVE-2015-3746, CVE-2015-3747, CVE-2015-3748,
                     CVE-2015-3749, CVE-2015-3750, CVE-2015-3751,
                     CVE-2015-3752, CVE-2015-3753, CVE-2015-3754,
                     CVE-2015-3755, CVE-2015-5788, CVE-2015-5789,
                     CVE-2015-5790, CVE-2015-5791, CVE-2015-5792,
                     CVE-2015-5793, CVE-2015-5794, CVE-2015-5795,
                     CVE-2015-5797, CVE-2015-5798, CVE-2015-5799,
                     CVE-2015-5800, CVE-2015-5801, CVE-2015-5802,
                     CVE-2015-5803, CVE-2015-5804, CVE-2015-5805,
                     CVE-2015-5806, CVE-2015-5807, CVE-2015-5809,
                     CVE-2015-5810, CVE-2015-5811, CVE-2015-5812,
                     CVE-2015-5813, CVE-2015-5814, CVE-2015-5815,
                     CVE-2015-5816, CVE-2015-5817, CVE-2015-5818,
                     CVE-2015-5819, CVE-2015-5822, CVE-2015-5823,
                     CVE-2015-5825, CVE-2015-5826, CVE-2015-5827,
                     CVE-2015-5828, CVE-2015-5928, CVE-2015-5929,
                     CVE-2015-5930, CVE-2015-5931, CVE-2015-7002,
                     CVE-2015-7012, CVE-2015-7013, CVE-2015-7014,
                     CVE-2015-7048, CVE-2015-7095, CVE-2015-7097,
                     CVE-2015-7099, CVE-2015-7100, CVE-2015-7102,
                     CVE-2015-7103, CVE-2015-7104.

Several vulnerabilities were discovered on WebKitGTK+.

CVE-2013-6663
    Versions affected: WebKitGTK+ before 2.4.0.
    Credit to Atte Kettunen of OUSPG.
    Use-after-free vulnerability in the SVGImage::setContainerSize
    function in core/svg/graphics/SVGImage.cpp in the SVG implementation
    in Blink, as used in Google Chrome before 33.0.1750.146, allows
    remote attackers to cause a denial of service or possibly have
    unspecified other impact via vectors related to the resizing of a
    view.

CVE-2014-1748
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Jordan Milne.
    The ScrollView::paint function in platform/scroll/ScrollView.cpp in
    Blink, as used in Google Chrome before 35.0.1916.114, allows remote
    attackers to spoof the UI by extending scrollbar painting into the
    parent frame.

CVE-2014-3192
    Versions affected: WebKitGTK+ before 2.6.3.
    Credit to cloudfuzzer.
    Use-after-free vulnerability in the
    ProcessingInstruction::setXSLStyleSheet function in
    core/dom/ProcessingInstruction.cpp in the DOM implementation in
    Blink, as used in Google Chrome before 38.0.2125.101, allows remote
    attackers to cause a denial of service or possibly have unspecified
    other impact via unknown vectors.

CVE-2014-4409
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Yosuke Hasegawa (NetAgent Co., Led.).
    WebKit in Apple iOS before 8 makes it easier for remote attackers to
    track users during private browsing via a crafted web site that
    reads HTML5 application-cache data that had been stored during
    normal browsing.

CVE-2014-4410
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Eric Seidel of Google.
    WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.

CVE-2014-4411
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Google Chrome Security Team.
    WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.

CVE-2014-4412
    Versions affected: WebKitGTK+ before 2.4.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.

CVE-2014-4413
    Versions affected: WebKitGTK+ before 2.4.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.

CVE-2014-4414
    Versions affected: WebKitGTK+ before 2.4.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.

CVE-2014-4452
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to unknown.
    WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2,
    allows remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption and application crash) via a crafted
    web site, a different vulnerability than CVE-2014-4462.

CVE-2014-4459
    Versions affected: WebKitGTK+ before 2.6.2.
    Credit to unknown.
    Use-after-free vulnerability in WebKit, as used in Apple OS X before
    10.10.1, allows remote attackers to execute arbitrary code via
    crafted page objects in an HTML document.

CVE-2014-4465
    Versions affected: WebKitGTK+ before 2.6.2.
    Credit to Rennie deGraaf of iSEC Partners.
    WebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x
    before 8.0.1 allows remote attackers to bypass the Same Origin
    Policy via crafted Cascading Style Sheets (CSS) token sequences
    within an SVG file in the SRC attribute of an IMG element.

CVE-2014-4466
    Versions affected: WebKitGTK+ before 2.6.2.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4468
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4469
    Versions affected: WebKitGTK+ before 2.6.4.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4470
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4471
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4472
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4473
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4474
    Versions affected: WebKitGTK+ before 2.6.2.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4475
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and
    8.x before 8.0.1, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2014-12-2-1.

CVE-2014-4476
    Versions affected: WebKitGTK+ before 2.6.2.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.1.3; Apple Safari before
    6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before
    7.0.3, allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2014-4477 and
    CVE-2014-4479.

CVE-2014-4477
    Versions affected: WebKitGTK+ before 2.6.4.
    Credit to lokihardt at ASRT working with HP’s Zero Day Initiative.
    WebKit, as used in Apple iOS before 8.1.3; Apple Safari before
    6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before
    7.0.3, allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2014-4476 and
    CVE-2014-4479.

CVE-2014-4479
    Versions affected: WebKitGTK+ before 2.6.4.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.1.3; Apple Safari before
    6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before
    7.0.3, allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2014-4476 and
    CVE-2014-4477.

CVE-2015-1068
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1069
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1070
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1071
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1072
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to unknown.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1073
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1074
    Versions affected: WebKitGTK+ before 2.6.4.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1075
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Google Chrome Security Team.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1076
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to unknown.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1077
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1080
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1081
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1082
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1083
    Versions affected: WebKitGTK+ before 2.6.4.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and
    8.x before 8.0.4, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    CVEs listed in APPLE-SA-2015-03-17-1.

CVE-2015-1084
    Versions affected: WebKitGTK+ before 2.6.1.
    Credit to Apple.
    The user interface in WebKit, as used in Apple Safari before 6.2.4,
    7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs
    consistently, which makes it easier for remote attackers to conduct
    phishing attacks via a crafted URL.

CVE-2015-1119
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Renata Hodovan of University of Szeged / Samsung
    Electronics.
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and
    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5,
    allows remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption and application crash) via a crafted
    web site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-
    SA-2015-04-08-4.

CVE-2015-1120
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and
    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5,
    allows remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption and application crash) via a crafted
    web site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-
    SA-2015-04-08-4.

CVE-2015-1121
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and
    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5,
    allows remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption and application crash) via a crafted
    web site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-
    SA-2015-04-08-4.

CVE-2015-1122
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and
    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5,
    allows remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption and application crash) via a crafted
    web site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-
    SA-2015-04-08-4.

CVE-2015-1124
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and
    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5,
    allows remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption and application crash) via a crafted
    web site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-
    SA-2015-04-08-4.

CVE-2015-1126
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Jouko Pynnonen of Klikki Oy.
    WebKit, as used in Apple iOS before 8.3 and Apple Safari before
    6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly
    handle the userinfo field in FTP URLs, which allows remote attackers
    to trigger incorrect resource access via unspecified vectors.

CVE-2015-1127
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Tyler C (2.6.5).
    The private-browsing implementation in WebKit in Apple Safari before
    6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing
    history into an index, which might allow local users to obtain
    sensitive information by reading index entries.

CVE-2015-1152
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and
    8.x before 8.0.6, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than
    CVE-2015-1153 and CVE-2015-1154.

CVE-2015-1153
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple (2.6.5).
    WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and
    8.x before 8.0.6, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than
    CVE-2015-1152 and CVE-2015-1154.

CVE-2015-1154
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple (2.6.5).
    WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and
    8.x before 8.0.6, allows remote attackers to execute arbitrary code
    or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than
    CVE-2015-1152 and CVE-2015-1153.

CVE-2015-1155
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Joe Vennix of Rapid7 Inc. working with HP's Zero Day
    Initiative.
    The history implementation in WebKit, as used in Apple Safari before
    6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote
    attackers to bypass the Same Origin Policy and read arbitrary files
    via a crafted web site.

CVE-2015-1156
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Zachary Durber of Moodle.
    The page-loading implementation in WebKit, as used in Apple Safari
    before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not
    properly handle the rel attribute in an A element, which allows
    remote attackers to bypass the Same Origin Policy for a link's
    target, and spoof the user interface, via a crafted web site.

CVE-2015-2330
    Versions affected: WebKitGTK+ before 2.6.6.
    Credit to Ross Lagerwall.
    Late TLS certificate verification in WebKitGTK+ prior to 2.6.6
    allows remote attackers to view a secure HTTP request, including,
    for example, secure cookies.

CVE-2015-3658
    Versions affected: WebKitGTK+ before 2.8.1.
    Credit to Brad Hill of Facebook.
    The Page Loading functionality in WebKit in Apple Safari before
    6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS
    before 8.4 and other products, does not properly consider redirects
    during decisions about sending an Origin header, which makes it
    easier for remote attackers to bypass CSRF protection mechanisms via
    a crafted web site.

CVE-2015-3659
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Peter Rutenbar working with HP's Zero Day Initiative.
    The SQLite authorizer in the Storage functionality in WebKit in
    Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7,
    as used in Apple iOS before 8.4 and other products, does not
    properly restrict access to SQL functions, which allows remote
    attackers to execute arbitrary code or cause a denial of service
    (application crash) via a crafted web site.

CVE-2015-3660
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    Cross-site scripting (XSS) vulnerability in the PDF functionality in
    WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x
    before 8.0.7 allows remote attackers to inject arbitrary web script
    or HTML via a crafted URL in embedded PDF content.

CVE-2015-3727
    Versions affected: WebKitGTK+ before 2.8.1.
    Credit to Peter Rutenbar working with HP's Zero Day Initiative.
    WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x
    before 8.0.7, as used in Apple iOS before 8.4 and other products,
    does not properly restrict rename operations on WebSQL tables, which
    allows remote attackers to access an arbitrary web site's database
    via a crafted web site.

CVE-2015-3730
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3731
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3732
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3733
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3734
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3735
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3736
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3737
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3738
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3739
    Versions affected: WebKitGTK+ before 2.8.1.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3740
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3741
    Versions affected: WebKitGTK+ before 2.8.1.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3742
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3743
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3744
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3745
    Versions affected: WebKitGTK+ before 2.8.1.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3746
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3747
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3748
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3749
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8,
    7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to
    execute arbitrary code or cause a denial of service (memory
    corruption and application crash) via a crafted web site, a
    different vulnerability than other WebKit CVEs listed in APPLE-
    SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVE-2015-3750
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Muneaki Nishimura (nishimunea).
    WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x
    before 8.0.8, as used in iOS before 8.4.1 and other products, does
    not enforce the HTTP Strict Transport Security (HSTS) protection
    mechanism for Content Security Policy (CSP) report requests, which
    allows man-in-the-middle attackers to obtain sensitive information
    by sniffing the network or spoof a report by modifying the client-
    server data stream.

CVE-2015-3751
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Muneaki Nishimura (nishimunea).
    WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x
    before 8.0.8, as used in iOS before 8.4.1 and other products, allows
    remote attackers to bypass a Content Security Policy protection
    mechanism by using a video control in conjunction with an IMG
    element within an OBJECT element.

CVE-2015-3752
    Versions affected: WebKitGTK+ before 2.8.4.
    Credit to Muneaki Nishimura (nishimunea).
    The Content Security Policy implementation in WebKit in Apple Safari
    before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS
    before 8.4.1 and other products, does not properly restrict cookie
    transmission for report requests, which allows remote attackers to
    obtain sensitive information via vectors involving (1) a cross-
    origin request or (2) a private-browsing request.

CVE-2015-3753
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Antonio Sanso and Damien Antipa of Adobe.
    WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x
    before 8.0.8, as used in iOS before 8.4.1 and other products, does
    not properly perform taint checking for CANVAS elements, which
    allows remote attackers to bypass the Same Origin Policy and obtain
    sensitive image data by leveraging a redirect to a data:image
    resource.

CVE-2015-3754
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Dongsung Kim (@kid1ng).
    The private-browsing implementation in WebKit in Apple Safari before
    6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent
    caching of HTTP authentication credentials, which makes it easier
    for remote attackers to track users via a crafted web site.

CVE-2015-3755
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to xisigr of Tencent's Xuanwu Lab.
    WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x
    before 8.0.8, as used in iOS before 8.4.1 and other products, allows
    remote attackers to spoof the user interface via a malformed URL.

CVE-2015-5788
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    The WebKit Canvas implementation in Apple iOS before 9 allows remote
    attackers to bypass the Same Origin Policy and obtain sensitive
    image information via vectors involving a CANVAS element.

CVE-2015-5789
    Versions affected: WebKitGTK+ before 2.6.1.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5790
    Versions affected: WebKitGTK+ before 2.6.2.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5791
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes
    before 12.3, allows remote attackers to execute arbitrary code or
    cause a denial of service (memory corruption and application crash)
    via a crafted web site, a different vulnerability than other WebKit
    CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5792
    Versions affected: WebKitGTK+ before 2.4.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5793
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes
    before 12.3, allows remote attackers to execute arbitrary code or
    cause a denial of service (memory corruption and application crash)
    via a crafted web site, a different vulnerability than other WebKit
    CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5794
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5795
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5797
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5798
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple iTunes before 12.3, allows man-in-the-
    middle attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via vectors
    related to iTunes Store browsing, a different vulnerability than
    other WebKit CVEs listed in APPLE-SA-2015-09-16-3.

CVE-2015-5799
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple (2.6.5).
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5800
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple (2.6.5).
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5801
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5802
    Versions affected: WebKitGTK+ before 2.6.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5803
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5804
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5805
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to unknown.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5806
    Versions affected: WebKitGTK+ before 2.8.3.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5807
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5809
    Versions affected: WebKitGTK+ before 2.8.4.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5810
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5811
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5812
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5813
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5814
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes
    before 12.3, allows remote attackers to execute arbitrary code or
    cause a denial of service (memory corruption and application crash)
    via a crafted web site, a different vulnerability than other WebKit
    CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5815
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iTunes before 12.3, allows man-in-the-
    middle attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via vectors
    related to iTunes Store browsing, a different vulnerability than
    other WebKit CVEs listed in APPLE-SA-2015-09-16-3.

CVE-2015-5816
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes
    before 12.3, allows remote attackers to execute arbitrary code or
    cause a denial of service (memory corruption and application crash)
    via a crafted web site, a different vulnerability than other WebKit
    CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5817
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5818
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5819
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site, a different vulnerability than other WebKit CVEs listed in
    APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5822
    Versions affected: WebKitGTK+ before 2.8.1.
    Credit to Mark S. Miller of Google.
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes
    before 12.3, allows remote attackers to execute arbitrary code or
    cause a denial of service (memory corruption and application crash)
    via a crafted web site, a different vulnerability than other WebKit
    CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5823
    Versions affected: WebKitGTK+ before 2.8.0.
    Credit to Apple.
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes
    before 12.3, allows remote attackers to execute arbitrary code or
    cause a denial of service (memory corruption and application crash)
    via a crafted web site, a different vulnerability than other WebKit
    CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.

CVE-2015-5825
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Yossi Oren et al. of Columbia University's Network
    Security Lab.
    WebKit in Apple iOS before 9 does not properly restrict the
    availability of Performance API times, which allows remote attackers
    to obtain sensitive information about the browser history, mouse
    movement, or network traffic via crafted JavaScript code.

CVE-2015-5826
    Versions affected: WebKitGTK+ before 2.6.5.
    Credit to filedescriptior, Chris Evans.
    WebKit in Apple iOS before 9 does not properly select the cases in
    which a Cascading Style Sheets (CSS) document is required to have
    the text/css content type, which allows remote attackers to bypass
    the Same Origin Policy via a crafted web site.

CVE-2015-5827
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Gildas.
    WebKit in Apple iOS before 9 allows remote attackers to bypass the
    Same Origin Policy and obtain an object reference via vectors
    involving a (1) custom event, (2) message event, or (3) pop state
    event.

CVE-2015-5828
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Lorenzo Fontana.
    The API in the WebKit Plug-ins component in Apple Safari before 9
    does not provide notification of an HTTP Redirection (aka 3xx)
    status code to a plugin, which allows remote attackers to bypass
    intended request restrictions via a crafted web site.

CVE-2015-5928
    Versions affected: WebKitGTK+ before 2.8.4.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and
    iTunes before 12.3.1, allows remote attackers to execute arbitrary
    code or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3,
    and APPLE-SA-2015-10-21-5.

CVE-2015-5929
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and
    iTunes before 12.3.1, allows remote attackers to execute arbitrary
    code or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3,
    and APPLE-SA-2015-10-21-5.

CVE-2015-5930
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and
    iTunes before 12.3.1, allows remote attackers to execute arbitrary
    code or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3,
    and APPLE-SA-2015-10-21-5.

CVE-2015-5931
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to unknown.
    WebKit, as used in Apple Safari before 9.0.1 and iTunes before
    12.3.1, allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than other WebKit CVEs
    listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.

CVE-2015-7002
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and
    iTunes before 12.3.1, allows remote attackers to execute arbitrary
    code or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3,
    and APPLE-SA-2015-10-21-5.

CVE-2015-7012
    Versions affected: WebKitGTK+ before 2.8.4.
    Credit to Apple.
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and
    iTunes before 12.3.1, allows remote attackers to execute arbitrary
    code or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3,
    and APPLE-SA-2015-10-21-5.

CVE-2015-7013
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit, as used in Apple Safari before 9.0.1 and iTunes before
    12.3.1, allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than other WebKit CVEs
    listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.

CVE-2015-7014
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to unknown.
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and
    iTunes before 12.3.1, allows remote attackers to execute arbitrary
    code or cause a denial of service (memory corruption and application
    crash) via a crafted web site, a different vulnerability than other
    WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3,
    and APPLE-SA-2015-10-21-5.

CVE-2015-7048
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7095,
    CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099,
    CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.

CVE-2015-7095
    Versions affected: WebKitGTK+ before 2.10.2.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7048,
    CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099,
    CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.

CVE-2015-7097
    Versions affected: WebKitGTK+ before 2.10.3.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7048,
    CVE-2015-7095, CVE-2015-7096, CVE-2015-7098, CVE-2015-7099,
    CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.

CVE-2015-7099
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7048,
    CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098,
    CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.

CVE-2015-7100
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7048,
    CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098,
    CVE-2015-7099, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.

CVE-2015-7102
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7048,
    CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098,
    CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, and CVE-2015-7103.

CVE-2015-7103
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before
    9.1 allows remote attackers to execute arbitrary code or cause a
    denial of service (memory corruption and application crash) via a
    crafted web site, a different vulnerability than CVE-2015-7048,
    CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098,
    CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, and CVE-2015-7102.

CVE-2015-7104
    Versions affected: WebKitGTK+ before 2.10.0.
    Credit to Apple.
    WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) via a crafted web
    site.


We recommend updating to the last stable version of WebKitGTK+. It is
the best way of ensuring that you are running a safe version of
WebKitGTK+. Please check our website for information about the last
stable releases.

Further information about WebKitGTK+ Security Advisories can be found
at: http://webkitgtk.org/security.html

The WebKitGTK+ team,
December 28, 2015

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 883 bytes
Desc: OpenPGP digital signature
URL: <https://lists.webkit.org/pipermail/webkit-gtk/attachments/20151228/b16897f6/attachment-0001.sig>


More information about the webkit-gtk mailing list