Lucene search

K
cveAppleCVE-2015-5883
HistoryOct 09, 2015 - 5:59 a.m.

CVE-2015-5883

2015-10-0905:59:19
CWE-20
apple
web.nvd.nist.gov
36
cve-2015-5883
apple os x
terminal
text-display
text-selection
remote attackers
spoofing
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

Low

EPSS

0.004

Percentile

72.9%

The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override formatting characters differently, which allows remote attackers to spoof the content of a text document via a crafted character sequence.

Affected configurations

Nvd
Node
applemac_os_xRange10.10.5
VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

Low

EPSS

0.004

Percentile

72.9%