Unscored CVE-2015-3685 EUVD-2015-3721GHSA-vvr7-68mr-fv57

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (me…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3686, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689.

References

75491 vdb-entry
http://support.apple.com/kb/HT204941
APPLE-SA-2015-06-30-2 vendor-advisory
1032760 vdb-entry
http://support.apple.com/kb/HT204942
APPLE-SA-2015-06-30-1 vendor-advisory