CVE-2015-7006: Path Traversal
Published Oct 23, 2015
·Updated
Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.
Affected Software
3 affected components
Apple iPhone OS<=9.0.2
Apple iOS and macOS<=10.11.0
Apple WatchOS<=2.0.0
Event History
Oct 23, 2015
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7006?
CVE-2015-7006 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2015-7006?
To fix CVE-2015-7006, update your Apple iOS to version 9.1, macOS to 10.11.1, or watchOS to 2.0.1 or later.
3
Which versions are affected by CVE-2015-7006?
CVE-2015-7006 affects Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1, and watchOS versions prior to 2.0.1.
4
What type of vulnerability is CVE-2015-7006?
CVE-2015-7006 is a directory traversal vulnerability in the BOM component of affected systems.
5
Can CVE-2015-7006 be exploited remotely?
Yes, CVE-2015-7006 can be exploited remotely through a crafted CPIO archive.