CVE

Id
78338  
CVE No.
CVE-2015-1061  
Status
Candidate  
Description
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.  
Phase
Assigned (20150116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
715295 78338 CVE-2015-1061 CONFIRM:https://support.apple.com/HT204413  View
715296 78338 CVE-2015-1061 CONFIRM:https://support.apple.com/HT204423  View
715297 78338 CVE-2015-1061 CONFIRM:https://support.apple.com/HT204426  View
715298 78338 CVE-2015-1061 CONFIRM:https://support.apple.com/kb/HT204563  View
715299 78338 CVE-2015-1061 APPLE:APPLE-SA-2015-03-09-1  View
715300 78338 CVE-2015-1061 URL:http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html  View
715301 78338 CVE-2015-1061 APPLE:APPLE-SA-2015-03-09-2  View
715302 78338 CVE-2015-1061 URL:http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.html  View
715303 78338 CVE-2015-1061 APPLE:APPLE-SA-2015-03-09-3  View
715304 78338 CVE-2015-1061 URL:http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html  View
715305 78338 CVE-2015-1061 BID:73004  View
715306 78338 CVE-2015-1061 URL:http://www.securityfocus.com/bid/73004  View
715307 78338 CVE-2015-1061 SECTRACK:1031864  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6861 JVNDB-2015-002181 Apple iOS のサンドボックスプロファイルコンポーネントにおける直近の連絡先の電話番号を読まれる脆弱性 Apple iOS のサンドボックスプロファイルコンポーネントには、直近の連絡先の (1) 電話番号、または (2) 電子メールアドレスを読まれる脆弱性が存在します。 CVE-2015-1113 78338 1.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002181.html  View