CVE-2015-1119: Medium severity iphone os vulnerability
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1119?
CVE-2015-1119 is a high severity vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption.
How do I fix CVE-2015-1119?
To mitigate CVE-2015-1119, update your affected devices to the latest versions of iOS, tvOS, or Safari as recommended by Apple.
Which software is affected by CVE-2015-1119?
CVE-2015-1119 affects Apple iOS versions before 8.3, tvOS versions before 7.2, and various versions of Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5.
What kind of attack does CVE-2015-1119 enable?
CVE-2015-1119 enables attackers to exploit the vulnerability via a crafted website, potentially leading to remote code execution or application crashes.
Was CVE-2015-1119 fixed by Apple?
Yes, Apple released updates addressing CVE-2015-1119 as part of their security updates in April 2015.