Lucene search
HistoryJul 03, 2015 - 1:59 a.m.
CVE-2015-3682
cve-2015-3682
apple
os x
ats
remote attackers
arbitrary code
denial of service
memory corruption
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.2 Medium
AI Score
Confidence
High
0.153 Low
EPSS
Percentile
95.9%
Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3681.
Affected configurations
Node
applemac_os_xRange≤10.10.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | le | 10.10.3 |
Related
prion
prion
Memory corruption
2015-07-03 01:59:00
Memory corruption
2015-07-03 01:59:00
Memory corruption
2015-07-03 01:59:00
cvelist
cvelist
nvd
nvd
cve
cve
zdi
zdi
nessus
nessus
Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)
2015-07-01 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Jul 2015)
2015-07-10 00:00:00
securityvulns
securityvulns
Apple Mac OS X / EFI multiple security vulnerabilities
2015-07-05 00:00:00
APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005
2015-07-05 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.2 Medium
AI Score
Confidence
High
0.153 Low
EPSS
Percentile
95.9%
Related for CVE-2015-3682