CVE-2015-1157 in iTunes
摘要 (英语)
CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
预定
2015-01-16
披露
2015-05-27
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 77877 | Apple iTunes 远程代码执行 | 17 | 未定义 | 官方修复 | CVE-2015-1157 |
| 75568 | Apple iOS Message Shutdown 拒绝服务 | 17 | 概念验证 | 解决方法 | CVE-2015-1157 |