CVE-2015-7107 - QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file

Back Back to CVE browser

MEDIUM

QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file

Published Dec 11, 2015

6.8

MEDIUM

CVSS 2.0

EPSS 2.87%

Description

QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (6)

http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://www.securitytracker.com/id/1034344
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-7039
Advisory
https://support.apple.com/HT205635
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT205637
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://www.securitytracker.com/id/1034344		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-7039		Advisory
https://support.apple.com/HT205635		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT205637		x_refsource_CONFIRMVendor Advisory