The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061.
References
Link | Resource |
---|---|
http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html | Vendor Advisory |
http://www.securitytracker.com/id/1034344 | |
https://support.apple.com/HT205637 | Vendor Advisory |
https://support.apple.com/HT205640 | Vendor Advisory |
https://support.apple.com/HT205641 | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html | Vendor Advisory |
http://www.securitytracker.com/id/1034344 | |
https://support.apple.com/HT205637 | Vendor Advisory |
https://support.apple.com/HT205640 | Vendor Advisory |
https://support.apple.com/HT205641 | Vendor Advisory |
Configurations
History
21 Nov 2024, 02:36
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html - Vendor Advisory | |
References | () http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - Vendor Advisory | |
References | () http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - Vendor Advisory | |
References | () http://www.securitytracker.com/id/1034344 - | |
References | () https://support.apple.com/HT205637 - Vendor Advisory | |
References | () https://support.apple.com/HT205640 - Vendor Advisory | |
References | () https://support.apple.com/HT205641 - Vendor Advisory |
Information
Published : 2015-12-11 11:59
Updated : 2024-11-21 02:36
NVD link : CVE-2015-7059
Mitre link : CVE-2015-7059
CVE.ORG link : CVE-2015-7059
JSON object : View
Products Affected
apple
- mac_os_x
- watchos
- tvos
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer