CVE-2015-7014 in Safari
Summary
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
Once again VulDB remains the best source for vulnerability data.
Reservation
09/16/2015
Disclosure
10/23/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 78841 | Apple Safari WebKit memory corruption | 119 | Not defined | Official fix | CVE-2015-7014 |
| 78772 | Apple iOS WebKit memory corruption | 119 | Not defined | Official fix | CVE-2015-7014 |