CVE-2015-5795: Buffer Overflow
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5795?
CVE-2015-5795 is classified as a critical vulnerability that can lead to arbitrary code execution or denial of service.
How do I fix CVE-2015-5795?
To fix CVE-2015-5795, ensure that you update to the latest version of iOS or iTunes that address the vulnerability.
Which versions are affected by CVE-2015-5795?
CVE-2015-5795 affects Apple Safari versions up to 8.0.8, iTunes version 12.2, and iOS versions up to 8.4.1.
What kind of attacks can exploit CVE-2015-5795?
CVE-2015-5795 can be exploited through crafted websites, allowing remote attackers to execute arbitrary code.
Are there any workarounds for CVE-2015-5795?
There are no effective workarounds for CVE-2015-5795; upgrading the software is the recommended mitigation.