Lucene search

[email protected]CVE-2015-7073

HistoryDec 11, 2015 - 11:59 a.m.

CVE-2015-7073

2015-12-1111:59:39

CWE-119

[email protected]

web.nvd.nist.gov

cve-2015-7073

apple

ios

os x

tvos

watchos

remote attack

arbitrary code execution

denial of service

ssl handshake

memory corruption

application crash

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.4%

JSON

Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.

Affected configurations

NVD

Node

appleiphone_osRange≤9.1

Node

applewatchosRange≤2.0

Node

applemac_os_xRange≤10.11.1

Node

appletvosRange≤9.0

CPENameOperatorVersion
apple:iphone_osapple iphone osle9.1

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	le	9.1

References

lists.apple.com/archives/security-announce/2015/Dec/msg00000.html

lists.apple.com/archives/security-announce/2015/Dec/msg00001.html

lists.apple.com/archives/security-announce/2015/Dec/msg00002.html

lists.apple.com/archives/security-announce/2015/Dec/msg00005.html

www.securityfocus.com/bid/78719

www.securitytracker.com/id/1034344

support.apple.com/HT205635

support.apple.com/HT205637

support.apple.com/HT205640

support.apple.com/HT205641

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.4%

JSON

Related for CVE-2015-7073

cvelist1 prion1 nvd1 nessus4 openvas1