CVE-2015-1157
CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.51%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 5.51% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-17
- Affected
- apple/iphone os · apple/mac os x · apple/itunes
- Source
- product-security@apple.com
References
- http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlPatch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.htmlPatch, Vendor Advisory
- http://support.apple.com/kb/HT204941Vendor Advisory
- http://support.apple.com/kb/HT204942Vendor Advisory
- http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083
- http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/Exploit
- http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/
- http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/Exploit
- http://www.securityfocus.com/bid/75491
- http://www.securitytracker.com/id/1032408
- http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/Exploit
- https://ghostbin.com/paste/zws9m
- https://support.apple.com/HT205221Vendor Advisory
- http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlPatch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.htmlPatch, Vendor Advisory
- http://support.apple.com/kb/HT204941Vendor Advisory
- http://support.apple.com/kb/HT204942Vendor Advisory
- http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083
- http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/Exploit
- http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/
- http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/Exploit
- http://www.securityfocus.com/bid/75491
- http://www.securitytracker.com/id/1032408
- http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/Exploit
- https://ghostbin.com/paste/zws9m
- https://support.apple.com/HT205221Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.