CVE-2015-3686 in iTunes

Resumen (Inglés)

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2015-05-07

Divulgación

2015-07-02

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
77878	Apple iTunes desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2015-3686
76200	Apple Mac OS X Text desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2015-3686

Fuentes

• MITRE
• NVD
• CVE Details