deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-3791
Published: 2015-08-17
Description: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00004.html; http://www.securityfocus.com/bid/76340
CVE: CVE-2015-3792
Published: 2015-08-17
Description: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00004.html; http://www.securityfocus.com/bid/76340
CVE: CVE-2015-3793
Published: 2015-08-17
Description: CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-3794
Published: 2015-08-17
Description: The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Unicode string.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-3795
Published: 2015-08-17
Description: libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app that sends a malformed XPC message.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3796
Published: 2015-08-17
Description: The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3797 and CVE-2015-3798.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3797
Published: 2015-08-17
Description: The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3798.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3798
Published: 2015-08-17
Description: The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3797.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3799
Published: 2015-08-17
Description: The Apple ID OD plug-in in Apple OS X before 10.10.5 allows attackers to change arbitrary user passwords via a crafted app.
CVSS Score: 9.3 (HIGH)
CWE: CWE-255
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-3800
Published: 2015-08-17
Description: The DiskImages component in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3802
Published: 2015-08-17
Description: Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3803
Published: 2015-08-17
Description: Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3804
Published: 2015-08-17
Description: FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-5756 and CVE-2015-5775.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3805
Published: 2015-08-17
Description: Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3806
Published: 2015-08-17
Description: Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-3807
Published: 2015-08-17
Description: libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted XML document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
CVE: CVE-2015-5746
Published: 2015-08-17
Description: AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5747
Published: 2015-08-17
Description: The fasttrap driver in the kernel in Apple OS X before 10.10.5 allows local users to cause a denial of service (resource consumption) via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5748
Published: 2015-08-17
Description: The kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes, which allows local users to cause a denial of service via a crafted volume.
CVSS Score: 2.1 (LOW)
CWE: CWE-17
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html
CVE: CVE-2015-5749
Published: 2015-08-17
Description: The Sandbox_profiles component in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5750
Published: 2015-08-17
Description: Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted series of Unicode characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5751
Published: 2015-08-17
Description: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5753, and CVE-2015-5779.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00004.html; http://www.securityfocus.com/bid/76340
CVE: CVE-2015-5752
Published: 2015-08-17
Description: Backup in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via a crafted app that creates a symlink.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-59
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5753
Published: 2015-08-17
Description: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5779.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5754
Published: 2015-08-17
Description: Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error.
CVSS Score: 9.3 (HIGH)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://packetstormsecurity.com/files/133550/OS-X-Suid-Privilege-Escalation.html; http://www.securityfocus.com/bid/76340
CVE: CVE-2015-5755
Published: 2015-08-17
Description: CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-5761.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html
CVE: CVE-2015-5756
Published: 2015-08-17
Description: FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-3804 and CVE-2015-5775.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5757
Published: 2015-08-17
Description: libpthread in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via an app that uses a crafted syscall to interfere with locking.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5758
Published: 2015-08-17
Description: ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5759
Published: 2015-08-17
Description: WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-254
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5761
Published: 2015-08-17
Description: CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-5755.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html
CVE: CVE-2015-5763
Published: 2015-08-17
Description: ntfs in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5766
Published: 2015-08-17
Description: Directory traversal vulnerability in Air Traffic in Apple iOS before 8.4.1 allows attackers to access arbitrary filesystem locations via vectors related to asset handling.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5768
Published: 2015-08-17
Description: AppleGraphicsControl in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5769
Published: 2015-08-17
Description: The MSVDX driver in Apple iOS before 8.4.1 allows remote attackers to cause a denial of service (device crash) via a crafted video.
CVSS Score: 7.1 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5770
Published: 2015-08-17
Description: MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76337; http://www.securitytracker.com/id/1033275
CVE: CVE-2015-5771
Published: 2015-08-17
Description: Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted QuickTime file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5772
Published: 2015-08-17
Description: Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code via a crafted Collada file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276
CVE: CVE-2015-5773
Published: 2015-08-17
Description: QL Office in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted office document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5774
Published: 2015-08-17
Description: Buffer overflow in IOHIDFamily in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5775
Published: 2015-08-17
Description: FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-3804 and CVE-2015-5756.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5776
Published: 2015-08-17
Description: Libinfo in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by leveraging use of an AF_INET6 socket.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5777
Published: 2015-08-17
Description: CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-5778.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5778
Published: 2015-08-17
Description: CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-5777.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5779
Published: 2015-08-17
Description: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5753.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00004.html; http://www.securityfocus.com/bid/76340
CVE: CVE-2015-5781
Published: 2015-08-17
Description: ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted PNG image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5782
Published: 2015-08-17
Description: ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html; http://www.securityfocus.com/bid/76343
CVE: CVE-2015-5783
Published: 2015-08-17
Description: IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.securityfocus.com/bid/76340; http://www.securitytracker.com/id/1033276