CVE-2015-3686 in Apple iTunesinfo

Summary

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689.

Reservation

05/07/2015

Disclosure

07/02/2015

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
77878Apple iTunes memory corruption119Not definedOfficial fixCVE-2015-3686
76200Apple Mac OS X Text File memory corruption119UnprovenOfficial fixCVE-2015-3686

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!