CVE-2015-7005
iPhone OS < 9.0.2 - Remote Code Execution via WebKit Memory Corruption
Title source: llmDescription
WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT205370
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033929
Scores
EPSS
0.0216
EPSS Percentile
80.0%
Details
CWE
CWE-119
Status
published
Products (1)
apple/iphone_os
< 9.0.2
Published
Oct 23, 2015
Tracked Since
Feb 18, 2026