CVE-2015-3717 in Apple iTunes
Summary
Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/07/2015
Disclosure
07/02/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 99029 | Apple iTunes SQLite memory corruption | 119 | Not defined | Official fix | CVE-2015-3717 |
| 76263 | Apple Mac OS X SQLite printf memory corruption | 119 | Not defined | Official fix | CVE-2015-3717 |