Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6992 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:34.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://supp
CVE ID: CVE-2015-6993 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
CVE ID: CVE-2015-6994 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory, which allows attackers to cause a denial of service via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/10
375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6995 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/7
0002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6996 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html - htt
ml - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205378 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-6997 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - https://support.
nce/2015/Oct/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205641 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-6998 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6999 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-7000 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a (1) Phone or (2) Messages notification on the lock screen soon after a setting was disabled. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.co
0002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-7001 State: PUBLISHED Published: 2015-12-11T11:00:00 Last Updated: 2024-08-06T07:36:35.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205635 - https://support.apple.com/HT205637 - http://www.securitytracker.com/id/1034344 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html -
s/security-announce/2015/Dec/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://www.securityfocus.com/bid/78719 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html - https://support.apple.com/HT205641 - https://support.apple.com/HT205640 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
CVE ID: CVE-2015-7002 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - http://www.securityfocus.co
CVE ID: CVE-2015-7003 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-7004 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-7005 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-7006 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/20
ounce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205378 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-7007 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375 - https://www.exploit-db.com/exploits/38535/ - http://packetstormsecurity.com/files/134072/Safari-User-Assisted-Applescript-Exec-Attack.html - http://www.rapid7.com/db/modules/exploit/osx
curity.com/files/134072/Safari-User-Assisted-Applescript-Exec-Attack.html - http://www.rapid7.com/db/modules/exploit/osx/browser/safari_user_assisted_applescript_exec
CVE ID: CVE-2015-7008 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
CVE ID: CVE-2015-7009 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7010, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
CVE ID: CVE-2015-7010 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7018. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
es: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033931
CVE ID: CVE-2015-7011 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77264 - https://support.apple.com/HT205372 - http://lists.apple.com/archives/security-announce/2015/Oct/msg000
s.com/bid/77264 - https://support.apple.com/HT205372 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html - https://support.apple.com/HT205377 - http://www.securitytracker.com/id/1033939
CVE ID: CVE-2015-7012 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - http://www.securityfocus.co
er: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - http://www.securityfocus.com/bid/77267 - https://support.apple.com/HT205370 - https://support.apple.com/HT205372 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html - https://support.apple.com/HT205377 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-7013 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77264 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - https://support.apple.com/HT205372
CVE ID: CVE-2015-7014 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - http://www.securityfocus.co
CVE ID: CVE-2015-7015 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/s
chives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html - https://support.apple.com/HT205370 - https://support.apple.com/HT205378 - http://www.securitytracker.com/id/1033929
CVE ID: CVE-2015-7016 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-7017 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://supp
CVE ID: CVE-2015-7018 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7010. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/securit
CVE ID: CVE-2015-7019 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7020. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-7020 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7019. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-7021 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-7022 State: PUBLISHED Published: 2015-10-23T10:00:00 Last Updated: 2024-08-06T07:36:35.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205370 - http://www.securitytracker.com/id/1033929 - http://www.securityfocus.com/bid/77268
CVE ID: CVE-2015-7023 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:36:35.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.sec
nounce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - https://support.apple.com/HT205370 - http://www.securityfocus.com/bid/77263 - http://www.securitytracker.com/id/1033929