Unscored CVE-2015-3689 EUVD-2015-3725GHSA-53xg-rm8g-x92p

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (me…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688.

References

75491 vdb-entry
http://support.apple.com/kb/HT204941
APPLE-SA-2015-06-30-2 vendor-advisory
1032760 vdb-entry
http://support.apple.com/kb/HT204942
APPLE-SA-2015-06-30-1 vendor-advisory