Lucene search

K
cve[email protected]CVE-2015-5839
HistorySep 18, 2015 - 10:59 a.m.

CVE-2015-5839

2015-09-1810:59:53
CWE-254
web.nvd.nist.gov
26
ios
code-signing
bypass
vulnerability
cve-2015-5839

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.9%

dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an executable file.

Affected configurations

NVD
Node
applewatchosMatch1.0
Node
applemac_os_xRange10.10.5
Node
appleiphone_osRange8.4.1
CPENameOperatorVersion
apple:watchosapple watchoseq1.0

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.9%