Lucene search

AppleCVE-2015-5840

HistorySep 18, 2015 - 10:59 a.m.

CVE-2015-5840

2015-09-1810:59:54

CWE-119

apple

web.nvd.nist.gov

cve-2015-5840

apple ios

denial of service

overflow fault

app crash

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.8

Confidence

Low

EPSS

0.034

Percentile

91.4%

JSON

The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service (overflow fault and app crash) via crafted data.

Affected configurations

Nvd

Node

applemac_os_xRange≤10.10.5

Node

applewatchosMatch1.0

Node

appleiphone_osRange≤8.4.1

VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
applewatchos1.0cpe:2.3:o:apple:watchos:1.0:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
apple	watchos	1.0	cpe:2.3:o:apple:watchos:1.0:::::::*
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::

References

lists.apple.com/archives/security-announce/2015/Sep/msg00001.html

lists.apple.com/archives/security-announce/2015/Sep/msg00005.html

lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

www.securityfocus.com/bid/76764

www.securitytracker.com/id/1033609

support.apple.com/HT205212

support.apple.com/HT205213

support.apple.com/HT205267

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.8

Confidence

Low

EPSS

0.034

Percentile

91.4%

JSON

Related for CVE-2015-5840