CVE-2015-1123 — Out-of-bounds Write in Apple Iphone OS

5 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
2.0%
top 16.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple Iphone OSApple TvosApple TV+1 more
Timeline
PublishedApr 10
Latest updateMay 14

Description

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and APPLE-SA-2015-04-08-4.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages4 packages

▶NVDapple/tvos7.1
▶Appleapple/ios8.3
▶Appleapple/apple_tv7.2

🔴Vulnerability Details

2
GHSA
GHSA-xxp4-q5hx-j33x: WebKit, as used in Apple iOS before 8↗2022-05-14
▶
OSV
CVE-2015-1123: WebKit, as used in Apple iOS before 8↗2015-04-10
▶

📋Vendor Advisories

2
Apple
CVE-2015-1123: Apple TV 7.2↗
▶
Apple
CVE-2015-1123: iOS 8.3↗
▶