CVE-2015-1073: Medium severity itunes vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1073?
CVE-2015-1073 has a high severity rating due to its potential to allow remote code execution or cause denial of service.
How do I fix CVE-2015-1073?
To fix CVE-2015-1073, users should update their Apple Safari browser and other affected Apple applications to the latest versions available.
Which versions of Safari are affected by CVE-2015-1073?
CVE-2015-1073 affects Apple Safari versions 6.2.3 and earlier, as well as 7.x and 8.x versions prior to 7.1.4 and 8.0.4 respectively.
What kind of attacks can exploit CVE-2015-1073?
CVE-2015-1073 can be exploited through crafted web pages that lead to memory corruption, allowing attackers to execute arbitrary code.
Are there specific operating systems affected by CVE-2015-1073?
CVE-2015-1073 affects multiple operating systems, including Apple iPhone OS, tvOS, and versions of iTunes that are vulnerable to the Safari exploit.