CVE-2015-1098 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents3 sources
Severity
7.3HIGHNVD
EPSS
0.7%
top 27.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple Iphone OSApple MAC OS XApple IOS+1 more
Timeline
PublishedApr 10
Latest updateMay 13

Description

iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.3 | Impact: 5.9

Affected Packages4 packages

▶NVDapple/mac_os_x< 10.10.3
▶NVDapple/iphone_os< 8.3
▶Appleapple/ios8.3

🔴Vulnerability Details

1
GHSA
GHSA-w75q-r59v-22w6: iWork in Apple iOS before 8↗2022-05-13
▶

📋Vendor Advisories

2
Apple
CVE-2015-1098: iOS 8.3↗
▶
Apple
CVE-2015-1098: OS X Yosemite v10.10.3 and Security Update 2015-004↗
▶