CVE-2015-1086

Опубликовано: 10 апр. 2015

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Ссылки

http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
Vendor Advisory
http://www.securitytracker.com/id/1032050
https://support.apple.com/HT204661
Vendor Advisory
https://support.apple.com/HT204662
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
Vendor Advisory
http://www.securitytracker.com/id/1032050
https://support.apple.com/HT204661
Vendor Advisory
https://support.apple.com/HT204662
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 7.1 (включая)

Конфигурация 2

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

EPSS

Процентиль: 18%

0.00057

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-h4rm-4mch-g9mg

github

больше 3 лет назад