CVE-2015-5823: Buffer Overflow
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5823?
CVE-2015-5823 has a critical severity as it allows remote attackers to execute arbitrary code or cause denial of service.
How do I fix CVE-2015-5823?
To fix CVE-2015-5823, update your affected devices to the latest versions of iOS, iTunes, or Safari.
What versions of software are affected by CVE-2015-5823?
CVE-2015-5823 affects iOS versions before 9, iTunes versions up to 12.2, and Safari versions up to 8.0.8.
Can CVE-2015-5823 be exploited through a web browser?
Yes, CVE-2015-5823 can be exploited by visiting a crafted website through an affected web browser.
What kind of attacks can be performed using CVE-2015-5823?
CVE-2015-5823 allows attackers to execute arbitrary code on the device or cause application crashes due to memory corruption.