The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, via a crafted web site.

The remote host is running a version of iOS that is prior to version 8.4.0 and the following components contain vulnerabilities :

 - Application Store 
 - Certificate Trust Policy 
 - CFNetwork HTTPAuthentication 
 - CoreGraphics 
 - CoreText 
 - coreTLS 
 - DiskImages 
 - FontParser 
 - ImageIO 
 - Kernel 
 - Mail 
 - MobileInstallation 
 - Safari 
 - Security 
 - SQLite 
 - Telephony 
 - WebKit 
 - WiFi Connectivity 


The version of Safari installed on the remote host is prior to 6.2.6 / 7.1.6 / 8.0.6 and is affected by the following vulnerabilities :

 - Multiple memory corruption issues in WebKit due to improper validation of user-supplied input. A remote attacker can exploit this, via a specially crafted web page, to cause a denial of service condition or to execute arbitrary code. (CVE-2015-1152, CVE-2015-1153, and CVE-2015-1154)
 - An information disclosure vulnerability in WebKit History exists due to a state management flaw and improper validation of user-supplied input. A remote attacker can exploit this, via a specially crafted web page, to disclose sensitive information from the file system. (CVE-2015-1155)
 - A flaw exists in WebKit Page Loading due to improper handling of rel attributes in anchor elements that allows target objects to get unauthorized access to link objects. A remote attacker can exploit this, via a specially crafted web page, to spoof the user interface. (CVE-2015-1156)

The mobile device is running a version of iOS prior to version 8.4. It is, therefore, affected by vulnerabilities in the following components :

  - Application Store
  - Certificate Trust Policy
  - CFNetwork HTTPAuthentication
  - CoreGraphics
  - CoreText
  - coreTLS
  - DiskImages
  - FontParser
  - ImageIO
  - Kernel
  - Mail
  - MobileInstallation
  - Safari
  - Security
  - SQLite
  - Telephony
  - WebKit
  - WiFi Connectivity

The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.6 / 7.1.6 / 8.0.6. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues in WebKit due to     improper validation of user-supplied input. A remote     attacker can exploit this, via a specially crafted     web page, to cause a denial of service condition or to     execute arbitrary code. (CVE-2015-1152, CVE-2015-1153,     and CVE-2015-1154)

  - An information disclosure vulnerability in WebKit     History exists due to a state management flaw and     improper validation of user-supplied input. A remote     attacker can exploit this, via a specially crafted web     page, to disclose sensitive information from the file     system. (CVE-2015-1155)     
  - A flaw exists in WebKit Page Loading due to improper     handling of rel attributes in anchor elements that     allows target objects to get unauthorized access to link     objects. A remote attacker can exploit this, via a     specially crafted web page, to spoof the user interface.
    (CVE-2015-1156)

ID	Name	Product	Family	Severity
8977	Apple iOS < 8.4 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
8870	Safari < 6.2.6 / 7.1.6 / 8.0.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
84490	Apple iOS < 8.4 Multiple Vulnerabilities (Logjam)	Nessus	Mobile Devices	high
83291	Mac OS X : Apple Safari < 6.2.6 / 7.1.6 / 8.0.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	medium

Detections

Analytics

CVE-2015-1156

medium

Tenable Plugins

high

high

high

medium