CVE-2015-3797: Buffer Overflow
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3798.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3797?
CVE-2015-3797 is considered a high severity vulnerability due to its ability to allow arbitrary code execution.
How do I fix CVE-2015-3797?
To fix CVE-2015-3797, update your Apple device to iOS version 8.4.1 or later and macOS version 10.10.5 or later.
What platforms are affected by CVE-2015-3797?
CVE-2015-3797 affects iOS devices running versions prior to 8.4.1 and Mac systems running OS X versions prior to 10.10.5.
What type of attack is possible with CVE-2015-3797?
CVE-2015-3797 allows context-dependent attackers to execute arbitrary code or cause denial of service through crafted regular expressions.
Is CVE-2015-3797 related to other vulnerabilities?
Yes, CVE-2015-3797 is a different vulnerability from CVE-2015-3796 and shares similarities in its nature of exploitation.