Lucene search

K
cve[email protected]CVE-2015-1115
HistoryApr 10, 2015 - 2:59 p.m.

CVE-2015-1115

2015-04-1014:59:00
CWE-284
web.nvd.nist.gov
17
cve-2015-1115
apple ios
sandbox protection
telephone capabilities
security vulnerability
nvd

5.7 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.4%

The Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app.

CPENameOperatorVersion
apple:iphone_osapple iphone osle8.2

5.7 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.4%

Related for CVE-2015-1115