CVE-2015-5940 in Mac OS X

Résumé (Anglaise)

The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Réserver

06/08/2015

Divulgation

23/10/2015

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
78773	Apple Mac OS X Accelerate buffer overflow	119	Non défini	Correctif officiel	CVE-2015-5940
78724	Apple iOS Accelerate buffer overflow	119	Non défini	Correctif officiel	CVE-2015-5940

Sources

• MITRE
• NVD
• CVE Details