CVE-2015-1100 - The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a crafted app

Back Back to CVE browser

MEDIUM

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a crafted app

Published Apr 10, 2015

5.4

MEDIUM

CVSS 2.0

EPSS 1.04%

Description

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a crafted app.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (10)

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://m00nbsd.net/garbage/Mac-OS-X_Fat-DoS.txt
x_refsource_MISCExploit
http://www.securitytracker.com/id/1032048
vdb-entryx_refsource_SECTRACK
https://support.apple.com/HT204659
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT204661
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT204662
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/kb/HT204870
x_refsource_CONFIRM
https://www.exploit-db.com/exploits/36814/
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://m00nbsd.net/garbage/Mac-OS-X_Fat-DoS.txt		x_refsource_MISCExploit
http://www.securitytracker.com/id/1032048		vdb-entryx_refsource_SECTRACK
https://support.apple.com/HT204659		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT204661		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT204662		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/kb/HT204870		x_refsource_CONFIRM
https://www.exploit-db.com/exploits/36814/		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Apr 10, 2015

Updated Aug 6, 2024

Reserved Jan 16, 2015

Link CVE-2015-1100

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-1100

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-1100