Lucene search

[email protected]CVE-2015-7066

HistoryDec 11, 2015 - 11:59 a.m.

CVE-2015-7066

2015-12-1111:59:32

CWE-119

[email protected]

web.nvd.nist.gov

cve-2015-7066

apple

ios

os x

tvos

watchos

opengl

memory corruption

remote code execution

denial of service

vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064.

Affected configurations

NVD

Node

applemac_os_xRange≤10.11.1

Node

appleiphone_osRange≤9.1

Node

appletvosRange≤9.0

Node

applewatchosRange≤2.0

CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.11.1

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	le	10.11.1

References

lists.apple.com/archives/security-announce/2015/Dec/msg00000.html

lists.apple.com/archives/security-announce/2015/Dec/msg00001.html

lists.apple.com/archives/security-announce/2015/Dec/msg00002.html

lists.apple.com/archives/security-announce/2015/Dec/msg00005.html

www.securityfocus.com/bid/78719

www.securitytracker.com/id/1034344

support.apple.com/HT205635

support.apple.com/HT205637

support.apple.com/HT205640

support.apple.com/HT205641

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

Related for CVE-2015-7066

cvelist2 nvd2 prion2 cve1 nessus4 openvas1