deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-5930
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-5931
Published: 2015-10-23
Description: WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
CVE: CVE-2015-5932
Published: 2015-10-23
Description: The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5933
Published: 2015-10-23
Description: Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5934.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5934
Published: 2015-10-23
Description: Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5933.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5935
Published: 2015-10-23
Description: ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5936, CVE-2015-5937, and CVE-2015-5939.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5936
Published: 2015-10-23
Description: ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5937
Published: 2015-10-23
Description: ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5939.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5938
Published: 2015-10-23
Description: ImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5939
Published: 2015-10-23
Description: ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5937.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5940
Published: 2015-10-23
Description: The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-5942
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5927.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5943
Published: 2015-10-23
Description: SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5944
Published: 2015-10-23
Description: CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-5945
Published: 2015-10-23
Description: The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6974
Published: 2015-10-23
Description: IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6976
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6977
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6978
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6983
Published: 2015-10-23
Description: Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.
CVSS Score: 8.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6984
Published: 2015-10-23
Description: libarchive in Apple OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6985
Published: 2015-10-23
Description: Apple Type Services (ATS) in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6987
Published: 2015-10-23
Description: The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service (application crash) via crafted bookmark metadata in a folder.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6988
Published: 2015-10-23
Description: The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6989
Published: 2015-10-23
Description: Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-6990
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6991
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6993
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6994
Published: 2015-10-23
Description: The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory, which allows attackers to cause a denial of service via a crafted app.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6995
Published: 2015-10-23
Description: The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-6996
Published: 2015-10-23
Description: IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-7002
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-7003
Published: 2015-10-23
Description: coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; https://support.apple.com/HT205375; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-7006
Published: 2015-10-23
Description: Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-7007
Published: 2015-10-23
Description: Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://packetstormsecurity.com/files/134072/Safari-User-Assisted-Applescript-Exec-Attack.html; http://www.rapid7.com/db/modules/exploit/osx/browser/safari_user_assisted_applescript_exec
CVE: CVE-2015-7008
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-7009
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7010, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-7010
Published: 2015-10-23
Description: FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7018.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html; http://www.securityfocus.com/bid/77263
CVE: CVE-2015-7011
Published: 2015-10-23
Description: WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html; http://www.securityfocus.com/bid/77264
CVE: CVE-2015-7012
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-7013
Published: 2015-10-23
Description: WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
CVE: CVE-2015-7014
Published: 2015-10-23
Description: WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.html
CVE: CVE-2015-7015
Published: 2015-10-23
Description: Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html