PT-2015-2117

CVE-2015-5876

Published

2015-09-18

Updated

2016-12-22

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dev Tools in Apple iOS versions prior to 9

Description The issue is related to a buffer overflow in the dyld component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption. This can be achieved via a crafted app.

Recommendations For Dev Tools in Apple iOS versions prior to 9, update to version 9 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Beist

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2015-5876