CVE-2015-5874: Buffer Overflow
Published Sep 18, 2015
·Updated
CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
Affected Software
4 affected components
Apple iOS and macOS<=10.10.5
Apple iTunes<=12.2
Apple iPhone OS<=8.4.1
Apple WatchOS=1.0
Remediation
Event History
Sep 18, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5874?
CVE-2015-5874 has a high severity level due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2015-5874?
To fix CVE-2015-5874, upgrade to the latest versions of affected software as specified by Apple.
3
Which versions are affected by CVE-2015-5874?
CVE-2015-5874 affects iOS versions before 9, iTunes versions before 12.3, macOS Yosemite up to 10.10.5, and watchOS 1.0.
4
What types of attacks can be executed using CVE-2015-5874?
CVE-2015-5874 can allow remote attackers to execute arbitrary code or cause memory corruption leading to a denial of service.
5
Is CVE-2015-5874 present in the latest versions of Apple software?
No, CVE-2015-5874 has been addressed in subsequent updates to the affected Apple software.