CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-5759
https://notcve.org/view.php?id=CVE-2015-5759
WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events. Vulnerabilidad en WebKit en Apple iOS en versiones anteriores a 8.4.1, permite a atacantes remotos suplantar clics a través de una página web manipulada que aprovecha acciones de pulsación de teclas. • http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html http://www.securityfocus.com/bid/76337 http://www.securitytracker.com/id/1033275 https://support.apple.com/kb/HT205030 • CWE-254: 7PK - Security Features •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-5766
https://notcve.org/view.php?id=CVE-2015-5766
Directory traversal vulnerability in Air Traffic in Apple iOS before 8.4.1 allows attackers to access arbitrary filesystem locations via vectors related to asset handling. Vulnerabilidad de salto de directorio en Air Traffic en Apple iOS en versiones anteriores a 8.4.1, permite a atacantes acceder a ubicaciones arbitrarias de archivos de sistema a través de vectores relacionados con el manejo de los activos. • http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html http://www.securityfocus.com/bid/76337 http://www.securitytracker.com/id/1033275 https://support.apple.com/kb/HT205030 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2015-3797 – OS X Regex Engine Bad Alloca
https://notcve.org/view.php?id=CVE-2015-3797
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3798. Vulnerabilidad en la librería TRE en Libc en Apple iOS en versiones anteriores a 8.4.1 y OS X en versiones anteriores a 10.10.5, permite a atacantes dependientes del contexto ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de una expresión regular manipulada, una vulnerabilidad diferente a CVE-2015-3796 y CVE-2015-3798. The OS X regex engine (TRE) uses the alloca function in a few places, sometimes where an attacker can partially control the size. • http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html http://www.securityfocus.com/bid/76343 http://www.securitytracker.com/id/1033275 https://support.apple.com/kb/HT205030 https://support.apple.com/kb/HT205031 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 1CVE-2015-3798 – Apple Mac OSX Regex Engine (TRE) - Integer Signedness / Overflow
https://notcve.org/view.php?id=CVE-2015-3798
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3797. Vulnerabilidad en la librería TRE en Libc en Apple iOS en versiones anteriores a 8.4.1 y OS X en versiones anteriores a 10.10.5, permite a atacantes dependientes del contexto ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de una expresión regular manipulada, una vulnerabilidad diferente a CVE-2015-3796 y CVE-2015-3797. OS X Regex Engine (TRE) suffers from integer signedness and overflow issues. • https://www.exploit-db.com/exploits/38262 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html http://www.securityfocus.com/bid/76343 http://www.securitytracker.com/id/1033275 https://code.google.com/p/google-security-research/issues/detail?id=429 https://support.apple.com/kb/HT205030 https://support.apple.com/kb/HT205031 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 2%CPEs: 2EXPL: 0CVE-2015-5773
https://notcve.org/view.php?id=CVE-2015-5773
QL Office in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted office document. Vulnerabilidad en QL Office en Apple iOS en versiones anteriores a 8.4.1 y OS X en versiones anteriores a 10.10.5, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de a un documento de office manipulado. • http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html http://www.securityfocus.com/bid/76343 http://www.securitytracker.com/id/1033275 https://support.apple.com/kb/HT205030 https://support.apple.com/kb/HT205031 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •