CVE-2015-1076: Medium severity iphone os vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1076?
CVE-2015-1076 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2015-1076?
To mitigate CVE-2015-1076, update your Apple Safari to version 8.0.4 or later, or upgrade your iPhone OS or iTunes to the latest versions.
Which versions of Safari are affected by CVE-2015-1076?
CVE-2015-1076 affects Safari versions prior to 8.0.4, including versions 6.2.3, 7.0 through 7.1.3.
Can CVE-2015-1076 cause denial of service?
Yes, CVE-2015-1076 can lead to denial of service through memory corruption and potential application crashes.
Is there a workaround for CVE-2015-1076 if I cannot update?
There is no specific workaround for CVE-2015-1076; the best protection is to ensure that the affected software is updated.