CVE

Id
83217  
CVE No.
CVE-2015-5940  
Status
Candidate  
Description
The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.  
Phase
Assigned (20150806)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
743468 83217 CVE-2015-5940 CONFIRM:https://support.apple.com/HT205370  View
743469 83217 CVE-2015-5940 CONFIRM:https://support.apple.com/HT205375  View
743470 83217 CVE-2015-5940 APPLE:APPLE-SA-2015-10-21-1  View
743471 83217 CVE-2015-5940 URL:http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html  View
743472 83217 CVE-2015-5940 APPLE:APPLE-SA-2015-10-21-4  View
743473 83217 CVE-2015-5940 URL:http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html  View
743474 83217 CVE-2015-5940 BID:77263  View
743475 83217 CVE-2015-5940 URL:http://www.securityfocus.com/bid/77263  View
743476 83217 CVE-2015-5940 SECTRACK:1033929  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
9630 JVNDB-2015-004950 Philippine Long Distance Telephone SpeedSurf 504AN デバイスのファームウェアおよび Kasda KW58293 デバイス上で稼働する form2WlanSetup.cgi におけるクロスサイトスクリプティングの脆弱性 Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN デバイスのファームウェアおよび Kasda KW58293 デバイス上で稼働する form2WlanSetup.cgi には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-5992 83217 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004950.html  View