Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-7036

Опубликовано: 22 нояб. 2015
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Версия до 10.10.3 (включая)
Конфигурация 2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия до 8.3 (включая)

EPSS

Процентиль: 87%
0.03516
Низкий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 10 лет назад

The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument.

redhat
около 10 лет назад

The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument.

github
больше 3 лет назад

The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument.

EPSS

Процентиль: 87%
0.03516
Низкий

7.5 High

CVSS2

Дефекты

CWE-20