CVE-2015-1083: Medium severity itunes vulnerability

Q: What is the severity of CVE-2015-1083?

CVE-2015-1083 has a high severity rating due to the potential for remote code execution and denial of service.

Q: How do I fix CVE-2015-1083?

To mitigate CVE-2015-1083, update your Apple Safari or iTunes to the latest version that addresses this vulnerability.

Q: What systems are affected by CVE-2015-1083?

CVE-2015-1083 affects multiple versions of Apple Safari as well as certain versions of Apple iTunes.

Q: Can CVE-2015-1083 cause data loss?

Yes, CVE-2015-1083 can potentially lead to data loss through memory corruption if exploited.

Q: Is CVE-2015-1083 being actively exploited?

While CVE-2015-1083 is a serious vulnerability, direct evidence of active exploitation is not publicly reported.

Published Mar 18, 2015

Updated

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

Affected Software

19 affected components

Apple iTunes<=12.1

Apple Safari<=6.2.3

Apple Safari=7.0

Apple Safari=7.0.1

Apple Safari=7.0.2

Apple Safari=7.0.3

Apple Safari=7.0.4

Apple Safari=7.0.5

Apple Safari=7.0.6

Apple Safari=7.1.0

Apple Safari=7.1.1

Apple Safari=7.1.2

Apple Safari=7.1.3

Apple Safari=8.0.0

Apple Safari=8.0.1

Apple Safari=8.0.2

Apple Safari=8.0.3

Apple tvOS<=7.1

Apple iPhone OS<=8.2

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html

Event History

Mar 18, 2015

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1083?

CVE-2015-1083 has a high severity rating due to the potential for remote code execution and denial of service.

How do I fix CVE-2015-1083?