CVE-2015-1092: Medium severity tvos vulnerability
NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1092?
CVE-2015-1092 is considered a high severity vulnerability due to its potential for remote attackers to exploit XML External Entity (XXE) processing.
How do I fix CVE-2015-1092?
To mitigate CVE-2015-1092, users should upgrade to Apple iOS version 8.3 or later, or tvOS version 7.2 or later.
What are the potential impacts of CVE-2015-1092?
The exploitation of CVE-2015-1092 could allow remote attackers to read arbitrary files on the device.
Which devices are affected by CVE-2015-1092?
CVE-2015-1092 affects Apple iOS versions prior to 8.3 and Apple TV versions prior to 7.2.
What kind of vulnerability is CVE-2015-1092 classified as?
CVE-2015-1092 is classified as an XML External Entity (XXE) vulnerability.