Lucene search

K
cve[email protected]CVE-2015-7113
HistoryDec 11, 2015 - 12:00 p.m.

CVE-2015-7113

2015-12-1112:00:10
CWE-119
web.nvd.nist.gov
22
cve-2015-7113
launchservices
apple ios
arbitrary code execution
denial of service
memory corruption

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%

The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.

Affected configurations

NVD
Node
appleiphone_osRange9.1
Node
applewatchosRange2.0
CPENameOperatorVersion
apple:iphone_osapple iphone osle9.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.2%

Related for CVE-2015-7113