CVE-2015-1082: Medium severity itunes vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1082?
CVE-2015-1082 has a high severity rating due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-1082?
To fix CVE-2015-1082, you should update to the latest version of Apple Safari or Apple iTunes that addresses this vulnerability.
What types of software are affected by CVE-2015-1082?
CVE-2015-1082 affects multiple versions of Apple Safari and Apple iTunes as well as older versions of iPhone OS and tvOS.
Can CVE-2015-1082 be exploited remotely?
Yes, CVE-2015-1082 can be exploited remotely through a crafted website.
What are the consequences of CVE-2015-1082 being exploited?
Exploitation of CVE-2015-1082 can result in arbitrary code execution or application crashes, causing denial of service.