Candidate: CVE-2015-3737 PublicDate: 2015-08-16 23:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3737 https://support.apple.com/kb/HT205033 https://support.apple.com/kb/HT205030 http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html Description: WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3. Ubuntu-Description: Notes: jdstrand> webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit jdstrand> webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_webkit: upstream_webkit: needs-triage precise_webkit: ignored (see notes) trusty_webkit: DNE trusty/esm_webkit: DNE vivid_webkit: DNE vivid/stable-phone-overlay_webkit: DNE vivid/ubuntu-core_webkit: DNE wily_webkit: DNE xenial_webkit: DNE yakkety_webkit: DNE devel_webkit: DNE Patches_webkitgtk: upstream_webkitgtk: needs-triage precise_webkitgtk: DNE trusty_webkitgtk: ignored (no update available) trusty/esm_webkitgtk: DNE (trusty was ignored [no update available]) vivid_webkitgtk: ignored (reached end-of-life) vivid/stable-phone-overlay_webkitgtk: DNE vivid/ubuntu-core_webkitgtk: DNE wily_webkitgtk: ignored (reached end-of-life) xenial_webkitgtk: ignored (no update available) yakkety_webkitgtk: ignored (no update available) devel_webkitgtk: ignored (no update available) Patches_qtwebkit-source: upstream_qtwebkit-source: needs-triage precise_qtwebkit-source: ignored (see notes) trusty_qtwebkit-source: ignored (no update available) trusty/esm_qtwebkit-source: DNE (trusty was ignored [no update available]) vivid_qtwebkit-source: ignored (reached end-of-life) vivid/stable-phone-overlay_qtwebkit-source: DNE vivid/ubuntu-core_qtwebkit-source: DNE wily_qtwebkit-source: ignored (reached end-of-life) xenial_qtwebkit-source: ignored (no update available) yakkety_qtwebkit-source: ignored (no update available) devel_qtwebkit-source: ignored (no update available) Patches_qtwebkit-opensource-src: upstream_qtwebkit-opensource-src: needs-triage precise_qtwebkit-opensource-src: DNE trusty_qtwebkit-opensource-src: ignored (no update available) trusty/esm_qtwebkit-opensource-src: DNE (trusty was ignored [no update available]) vivid_qtwebkit-opensource-src: ignored (reached end-of-life) vivid/stable-phone-overlay_qtwebkit-opensource-src: DNE vivid/ubuntu-core_qtwebkit-opensource-src: DNE wily_qtwebkit-opensource-src: ignored (reached end-of-life) xenial_qtwebkit-opensource-src: ignored (no update available) esm-infra/xenial_qtwebkit-opensource-src: ignored (no update available) yakkety_qtwebkit-opensource-src: ignored (no update available) devel_qtwebkit-opensource-src: ignored (no update available)