NVD

Id
23472  
Name
CVE-2015-1086  
Description
The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-04-10  
Modified Date
2015-09-30  
Seq
2015-1086  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
124327 23472 CVE-2015-1086 APPLE-SA-2015-04-08-3  View
124328 23472 CVE-2015-1086 APPLE-SA-2015-04-08-4  View
124329 23472 CVE-2015-1086 1032050  View
124330 23472 CVE-2015-1086 https://support.apple.com/HT204661  View
124331 23472 CVE-2015-1086 https://support.apple.com/HT204662  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19143 JVNDB-2014-008018 Apple iOS および Apple TV の Audio Drivers サブシステムにおける任意のコードを実行される脆弱性 Apple iOS および Apple TV の Audio Drivers サブシステムは、IOKit オブジェクトのメタデータを適切に検証しないため、特権付きコンテキスト内で任意のコードを実行される脆弱性が存在します。 CVE-2015-1086 78311 CVE-2015-1086 23472 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008018.html 2014-04-08 2015-04-14 View