CVE-2015-1157 in iTunes

Zusammenfassung (Englisch)

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservieren

16.01.2015

Veröffentlichung

27.05.2015

Status

Bestätigt

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
77877	Apple iTunes Remote Code Execution	17	Nicht definiert	Offizieller Fix	CVE-2015-1157
75568	Apple iOS Message Shutdown Denial of Service	17	Proof-of-Concept	Workaround	CVE-2015-1157

Quellen

• MITRE
• NVD
• CVE Details