CVE-2015-7012: Buffer Overflow
First published: Fri Oct 23 2015(Updated: )
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iTunes for Windows | <=12.3.0 | |
| Apple Mobile Safari | <=9.0 | |
| iOS | <=9.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
- http://www.securityfocus.com/bid/77267
- http://www.securitytracker.com/id/1033929
- https://support.apple.com/HT205370
- https://support.apple.com/HT205372
- https://support.apple.com/HT205377
Frequently Asked Questions
What is the severity of CVE-2015-7012?
CVE-2015-7012 is a high severity vulnerability that allows remote code execution and denial of service in affected versions of WebKit.
How do I fix CVE-2015-7012?
To fix CVE-2015-7012, update Apple iTunes to version 12.3.1 or later, Safari to version 9.0.1 or later, and iPhone OS to version 9.1 or later.
Which versions of Apple software are affected by CVE-2015-7012?
CVE-2015-7012 affects Apple iTunes versions before 12.3.1, Safari versions before 9.0.1, and iPhone OS versions before 9.1.
What types of attacks can exploit CVE-2015-7012?
CVE-2015-7012 can be exploited through crafted web pages that can cause memory corruption or application crashes.
Who is potentially impacted by CVE-2015-7012?
Users of Apple devices running vulnerable versions of iTunes, Safari, or iPhone OS are potentially impacted by CVE-2015-7012.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple itunes for windows
- version/apple itunes for windows/12.3.0
- canonical/apple mobile safari
- version/apple mobile safari/9.0
- canonical/ios
- version/ios/9.0.2