VulnerabilityModified

CVE-2015-7002

MEDIUM 6.8EPSS 2.68%

Does this matter?

Lower severity and a low EPSS score (2.68%). Track it; it rarely justifies an emergency change on its own.

Description

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 2.68% probability · 85th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: apple/itunes · apple/safari · apple/iphone os
Source: product-security@apple.com

References

http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.htmlVendor Advisory
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
http://www.securityfocus.com/bid/77267
http://www.securitytracker.com/id/1033929
https://support.apple.com/HT205370Vendor Advisory
https://support.apple.com/HT205372Vendor Advisory
https://support.apple.com/HT205377Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00004.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00006.htmlVendor Advisory
http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
http://www.securityfocus.com/bid/77267
http://www.securitytracker.com/id/1033929
https://support.apple.com/HT205370Vendor Advisory
https://support.apple.com/HT205372Vendor Advisory
https://support.apple.com/HT205377Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.