CVE-2015-6991
published 2015-10-23CVE-2015-6991: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…
PriorityP335medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.12%
86.5th percentile
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | <= 9.0.2 | — |
| apple | mac_os_x | <= 10.11.0 | — |
| apple | os_x_el_capitan_10.11.1_security_update_2015-004_yosemite_and_security_update_20 | — | — |
| apple | watchos | <= 2.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2015-6991: iOS 9.1
vendor_apple·CVSS 6.8
CVE-2015-6991 [MEDIUM] CVE-2015-6991: iOS 9.1
Apple Security Update: About the security content of iOS 9.1
Product: iOS
Version: 9.1
CVE: CVE-2015-6991
Component: CVE-2015-5942
Apple
CVE-2015-6991: OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks
vendor_apple·CVSS 6.8
CVE-2015-6991 [MEDIUM] CVE-2015-6991: OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks
Apple Security Update: About the security content of OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks
Product: OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks
CVE: CVE-2015-6991
Component: CVE-2015-5942
GHSA
GHSA-rq65-g62r-7h5f: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-7008 [MEDIUM] CWE-119 GHSA-rq65-g62r-7h5f: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-8rjh-6ccf-h49m: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-7009 [MEDIUM] CWE-119 GHSA-8rjh-6ccf-h49m: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-9xqr-3j8q-q3jm: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-6976 [MEDIUM] CWE-119 GHSA-9xqr-3j8q-q3jm: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-2xpv-7mpx-xj47: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-7018 [MEDIUM] CWE-119 GHSA-2xpv-7mpx-xj47: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7010.
GHSA
GHSA-j8mh-39gv-q9jf: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-6978 [MEDIUM] CWE-119 GHSA-j8mh-39gv-q9jf: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-w9cp-9ph2-q3gx: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-6977 [MEDIUM] CWE-119 GHSA-w9cp-9ph2-q3gx: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-c4c4-wp3j-g6r6: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-6991 [MEDIUM] CWE-119 GHSA-c4c4-wp3j-g6r6: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-vpg8-3h42-cfgh: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-6990 [MEDIUM] CWE-119 GHSA-vpg8-3h42-cfgh: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-v75q-frvq-h73w: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-6993 [MEDIUM] CWE-119 GHSA-v75q-frvq-h73w: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
GHSA
GHSA-77vm-c9cv-mmrv: FontParser in Apple iOS before 9
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2015-7010 [MEDIUM] CWE-119 GHSA-77vm-c9cv-mmrv: FontParser in Apple iOS before 9
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7018.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2015/Oct/msg00005.htmlhttp://www.securityfocus.com/bid/77263http://www.securitytracker.com/id/1033929https://support.apple.com/HT205370https://support.apple.com/HT205375http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2015/Oct/msg00005.htmlhttp://www.securityfocus.com/bid/77263http://www.securitytracker.com/id/1033929https://support.apple.com/HT205370https://support.apple.com/HT205375
2015-10-23
Published