First published: Fri Sep 18 2015(Updated: )
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mobile Safari | <=8.0.8 | |
iOS | <=8.4.1 | |
Apple iTunes for Windows | <=12.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-5796 is considered a high severity vulnerability due to its potential to allow remote code execution.
To mitigate CVE-2015-5796, users should update their version of iOS or Safari to the latest available release.
CVE-2015-5796 affects Apple Safari up to version 8.0.8, iOS up to version 8.4.1, and iTunes up to version 12.2.
Yes, CVE-2015-5796 can cause a denial of service due to memory corruption and application crashes.
Remote attackers can exploit CVE-2015-5796 by using specially crafted websites to execute arbitrary code.