CVE-2015-5808 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Itunes

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
0.7%
top 29.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple ItunesApple Safari
Timeline
PublishedSep 18
Latest updateMay 17

Description

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-3.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDapple/itunes12.2
▶NVDapple/safari8.0.8

🔴Vulnerability Details

3
GHSA
GHSA-q7w5-8wrw-462x: WebKit, as used in Apple iTunes before 12↗2022-05-17
▶
OSV
CVE-2015-5808: WebKit, as used in Apple iTunes before 12↗2015-09-18
▶
CVEList
CVE-2015-5808: WebKit, as used in Apple iTunes before 12↗2015-09-18
▶

📋Vendor Advisories

2
Apple
CVE-2015-5808: iTunes 12.3↗
▶
Apple
CVE-2015-5808: Safari 9↗
▶
CVE-2015-5808 — Apple Itunes vulnerability | cvebase