CVE-2015-6978: Buffer Overflow
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6978?
CVE-2015-6978 has a high severity due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-6978?
To fix CVE-2015-6978, upgrade to Apple iOS 9.1 or later, or macOS 10.11.1 or later.
Which systems are affected by CVE-2015-6978?
CVE-2015-6978 affects Apple iPhone OS versions up to 9.0.2, macOS Yosemite up to 10.11.0, and watchOS 2.0.
Can CVE-2015-6978 lead to data loss?
Yes, CVE-2015-6978 can potentially lead to data loss through memory corruption exploitation.
Is CVE-2015-6978 specific to any file type?
CVE-2015-6978 is specific to crafted font files that can cause vulnerabilities in FontParser.