CVE-2015-1070: Medium severity itunes vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1070?
CVE-2015-1070 is classified as a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-1070?
To fix CVE-2015-1070, upgrade your version of Safari or iTunes to the latest release that addresses this vulnerability.
What versions of Safari are affected by CVE-2015-1070?
CVE-2015-1070 affects Safari versions before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4.
Can CVE-2015-1070 be exploited remotely?
Yes, CVE-2015-1070 can be exploited remotely through crafted web content that leads to memory corruption.
What platforms are impacted by CVE-2015-1070?
CVE-2015-1070 impacts Apple Safari on various platforms including macOS, iOS, and tvOS.