Lucene search

[email protected]CVE-2015-7064

HistoryDec 11, 2015 - 11:59 a.m.

CVE-2015-7064

2015-12-1111:59:30

CWE-119

[email protected]

web.nvd.nist.gov

cve-2015-7064

apple

ios

os x

tvos

watchos

remote code execution

memory corruption

web site

security vulnerability

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7066.

Affected configurations

NVD

Node

appleiphone_osRange≤9.1

Node

applemac_os_xRange≤10.11.1

Node

appletvosRange≤9.0

Node

applewatchosRange≤2.0

CPENameOperatorVersion
apple:iphone_osapple iphone osle9.1

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	le	9.1

References

lists.apple.com/archives/security-announce/2015/Dec/msg00000.html

lists.apple.com/archives/security-announce/2015/Dec/msg00001.html

lists.apple.com/archives/security-announce/2015/Dec/msg00002.html

lists.apple.com/archives/security-announce/2015/Dec/msg00005.html

www.securityfocus.com/bid/78719

www.securitytracker.com/id/1034344

support.apple.com/HT205635

support.apple.com/HT205637

support.apple.com/HT205640

support.apple.com/HT205641

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

Related for CVE-2015-7064

cvelist2 nvd2 cve1 prion2 nessus4 openvas1