CVE-2015-7002 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
1.0%
top 22.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple ItunesApple Safari
Timeline
PublishedOct 23
Latest updateMay 17

Description

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDapple/itunes12.3.0
▶NVDapple/safari9.0
▶NVDapple/iphone_os9.0.2

🔴Vulnerability Details

3
GHSA
GHSA-vvvg-9wmm-566v: WebKit, as used in Apple iOS before 9↗2022-05-17
▶
CVEList
CVE-2015-7002: WebKit, as used in Apple iOS before 9↗2015-10-23
▶
OSV
CVE-2015-7002: WebKit, as used in Apple iOS before 9↗2015-10-23
▶

📋Vendor Advisories

3
Apple
CVE-2015-7002: iTunes 12.3.1↗
▶
Apple
CVE-2015-7002: Safari 9.0.1↗
▶
Apple
CVE-2015-7002: iOS 9.1↗
▶
CVE-2015-7002 — Apple Iphone OS vulnerability | cvebase