CVE-2015-1068: Medium severity tvos vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1068?
CVE-2015-1068 has been assessed to allow remote attackers to execute arbitrary code or cause denial of service.
How do I fix CVE-2015-1068?
To mitigate CVE-2015-1068, update your affected Apple Safari, Apple iPhone OS, or tvOS to the latest version.
Which versions of Apple Safari are affected by CVE-2015-1068?
CVE-2015-1068 affects Apple Safari versions prior to 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4.
Are other Apple products affected by CVE-2015-1068?
Yes, CVE-2015-1068 also impacts tvOS versions up to and including 7.1 and iOS versions prior to 8.2.
What types of attacks can CVE-2015-1068 facilitate?
CVE-2015-1068 can enable attackers to execute arbitrary code on the affected systems or cause application crashes.