Lucene search

K

[email protected]CVE-2015-5874

HistorySep 18, 2015 - 12:00 p.m.

CVE-2015-5874

2015-09-1812:00:00

CWE-119

[email protected]

web.nvd.nist.gov

39

cve-2015-5874

coretext

memory corruption

apple ios

itunes

remote code execution

denial of service

nvd

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.031 Low

EPSS

Percentile

91.0%

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.10.5
apple:itunesapple itunesle12.2
apple:iphone_osapple iphone osle8.4.1
apple:watchosapple watchoseq1.0

References

lists.apple.com/archives/security-announce/2015/Sep/msg00001.html

lists.apple.com/archives/security-announce/2015/Sep/msg00003.html

lists.apple.com/archives/security-announce/2015/Sep/msg00005.html

lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

www.securityfocus.com/bid/76763

www.securitytracker.com/id/1033609

support.apple.com/HT205212

support.apple.com/HT205213

support.apple.com/HT205221

support.apple.com/HT205267

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.031 Low

EPSS

Percentile

91.0%

Related for CVE-2015-5874

prion1 securityvulns8 nessus4 openvas1 kaspersky1