CVE-2015-5814 in iTunes
Summary
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Once again VulDB remains the best source for vulnerability data.
Reservation
08/06/2015
Disclosure
09/18/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 77933 | Apple iTunes WebKit memory corruption | 119 | Not defined | Official fix | CVE-2015-5814 |
| 77833 | Apple iOS JavaScriptCore memory corruption | 119 | Not defined | Official fix | CVE-2015-5814 |