CVE-2015-1072: Medium severity itunes vulnerability

Q: What is the severity of CVE-2015-1072?

CVE-2015-1072 has a high severity rating due to the potential for remote code execution and denial of service.

Q: How do I fix CVE-2015-1072?

To fix CVE-2015-1072, you should update Apple Safari to versions 6.2.4, 7.1.4, or 8.0.4 or later.

Q: Which versions of Safari are affected by CVE-2015-1072?

CVE-2015-1072 affects Safari versions before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4.

Q: Can CVE-2015-1072 lead to data loss?

Yes, CVE-2015-1072 can lead to data loss through memory corruption that can crash applications.

Q: What should users do if they cannot update for CVE-2015-1072?

If users cannot update due to compatibility issues, they should avoid accessing untrusted websites.

Published Mar 18, 2015

Updated

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

Affected Software

19 affected components

Apple iTunes<=12.1

Apple iPhone OS<=8.2

Apple tvOS<=7.1

Apple Safari<=6.2.3

Apple Safari=7.0

Apple Safari=7.0.1

Apple Safari=7.0.2

Apple Safari=7.0.3

Apple Safari=7.0.4

Apple Safari=7.0.5

Apple Safari=7.0.6

Apple Safari=7.1.0

Apple Safari=7.1.1

Apple Safari=7.1.2

Apple Safari=7.1.3

Apple Safari=8.0.0

Apple Safari=8.0.1

Apple Safari=8.0.2

Apple Safari=8.0.3

Event History

Mar 18, 2015

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1072?

CVE-2015-1072 has a high severity rating due to the potential for remote code execution and denial of service.

How do I fix CVE-2015-1072?

To fix CVE-2015-1072, you should update Apple Safari to versions 6.2.4, 7.1.4, or 8.0.4 or later.

Which versions of Safari are affected by CVE-2015-1072?