CVE-2015-5797: Buffer Overflow
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5797?
CVE-2015-5797 has a high severity rating due to its potential to allow remote code execution and denial of service.
How do I fix CVE-2015-5797?
To fix CVE-2015-5797, users should update their affected Apple devices to the latest versions of iOS or iTunes.
Which software is affected by CVE-2015-5797?
CVE-2015-5797 affects Apple iPhone OS versions up to 8.4.1, Apple Safari versions up to 8.0.8, and Apple iTunes versions up to 12.2.
What type of attack does CVE-2015-5797 allow?
CVE-2015-5797 allows attackers to execute arbitrary code or cause a denial of service through a crafted web page.
When was CVE-2015-5797 disclosed?
CVE-2015-5797 was disclosed in September 2015 as part of Apple's security announcements.