Vulnerability-Lookup

CERTFR-2015-AVI-355

Vulnerability from certfr_avis - Published: 2015-08-14 - Updated: 2015-08-14

De multiples vulnérabilités ont été corrigées dans Apple OS X. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Apple	N/A	OS X Mavericks versions antérieures à 10.9.5
Apple	N/A	OS X Mountain Lion versions antérieures à 10.8.5
Apple	N/A	OS X Yosemite versions antérieures à 10.10.5

References

Title

Publication Time

Tags

Bulletin de sécurité Apple HT205031 du 13 août 2015

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "OS X Mavericks versions ant\u00e9rieures \u00e0 10.9.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "OS X Mountain Lion versions ant\u00e9rieures \u00e0 10.8.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "OS X Yosemite versions ant\u00e9rieures \u00e0 10.10.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-4024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4024"
    },
    {
      "name": "CVE-2015-3768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3768"
    },
    {
      "name": "CVE-2015-3799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3799"
    },
    {
      "name": "CVE-2015-3307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3307"
    },
    {
      "name": "CVE-2015-3153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3153"
    },
    {
      "name": "CVE-2015-4148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4148"
    },
    {
      "name": "CVE-2015-3789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3789"
    },
    {
      "name": "CVE-2015-4026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4026"
    },
    {
      "name": "CVE-2015-5600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5600"
    },
    {
      "name": "CVE-2015-3757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3757"
    },
    {
      "name": "CVE-2015-5782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5782"
    },
    {
      "name": "CVE-2015-3773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3773"
    },
    {
      "name": "CVE-2014-0191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0191"
    },
    {
      "name": "CVE-2013-7040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7040"
    },
    {
      "name": "CVE-2015-3183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3183"
    },
    {
      "name": "CVE-2015-1791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1791"
    },
    {
      "name": "CVE-2014-3583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3583"
    },
    {
      "name": "CVE-2015-3782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3782"
    },
    {
      "name": "CVE-2014-3581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3581"
    },
    {
      "name": "CVE-2015-3805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3805"
    },
    {
      "name": "CVE-2015-3765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3765"
    },
    {
      "name": "CVE-2015-5779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5779"
    },
    {
      "name": "CVE-2009-5078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-5078"
    },
    {
      "name": "CVE-2015-3766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3766"
    },
    {
      "name": "CVE-2015-3148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3148"
    },
    {
      "name": "CVE-2014-3613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3613"
    },
    {
      "name": "CVE-2015-3807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3807"
    },
    {
      "name": "CVE-2015-3796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3796"
    },
    {
      "name": "CVE-2013-1775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1775"
    },
    {
      "name": "CVE-2014-7185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7185"
    },
    {
      "name": "CVE-2014-0067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0067"
    },
    {
      "name": "CVE-2012-6685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6685"
    },
    {
      "name": "CVE-2015-2787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2787"
    },
    {
      "name": "CVE-2015-3804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3804"
    },
    {
      "name": "CVE-2015-3764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3764"
    },
    {
      "name": "CVE-2015-5757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5757"
    },
    {
      "name": "CVE-2015-4025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4025"
    },
    {
      "name": "CVE-2015-5753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5753"
    },
    {
      "name": "CVE-2014-7844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7844"
    },
    {
      "name": "CVE-2015-5748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5748"
    },
    {
      "name": "CVE-2013-7422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7422"
    },
    {
      "name": "CVE-2015-0241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0241"
    },
    {
      "name": "CVE-2015-3800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3800"
    },
    {
      "name": "CVE-2014-8151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8151"
    },
    {
      "name": "CVE-2015-3185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3185"
    },
    {
      "name": "CVE-2015-0243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0243"
    },
    {
      "name": "CVE-2015-1789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1789"
    },
    {
      "name": "CVE-2015-0244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0244"
    },
    {
      "name": "CVE-2014-8150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8150"
    },
    {
      "name": "CVE-2014-9140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9140"
    },
    {
      "name": "CVE-2015-3330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3330"
    },
    {
      "name": "CVE-2014-3707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3707"
    },
    {
      "name": "CVE-2015-3776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3776"
    },
    {
      "name": "CVE-2009-5044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-5044"
    },
    {
      "name": "CVE-2015-3143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3143"
    },
    {
      "name": "CVE-2014-0106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0106"
    },
    {
      "name": "CVE-2015-5750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5750"
    },
    {
      "name": "CVE-2015-3787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3787"
    },
    {
      "name": "CVE-2015-5751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5751"
    },
    {
      "name": "CVE-2015-3780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3780"
    },
    {
      "name": "CVE-2015-3802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3802"
    },
    {
      "name": "CVE-2013-7338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-7338"
    },
    {
      "name": "CVE-2015-5781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5781"
    },
    {
      "name": "CVE-2014-9680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9680"
    },
    {
      "name": "CVE-2015-4022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4022"
    },
    {
      "name": "CVE-2015-3771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3771"
    },
    {
      "name": "CVE-2015-3806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3806"
    },
    {
      "name": "CVE-2015-3329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3329"
    },
    {
      "name": "CVE-2015-1788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1788"
    },
    {
      "name": "CVE-2015-3788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3788"
    },
    {
      "name": "CVE-2015-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1792"
    },
    {
      "name": "CVE-2015-5778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5778"
    },
    {
      "name": "CVE-2015-3803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3803"
    },
    {
      "name": "CVE-2015-3772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3772"
    },
    {
      "name": "CVE-2015-3762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3762"
    },
    {
      "name": "CVE-2015-3769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3769"
    },
    {
      "name": "CVE-2013-2776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2776"
    },
    {
      "name": "CVE-2015-3774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3774"
    },
    {
      "name": "CVE-2015-5758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5758"
    },
    {
      "name": "CVE-2015-5756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5756"
    },
    {
      "name": "CVE-2015-5761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5761"
    },
    {
      "name": "CVE-2015-5763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5763"
    },
    {
      "name": "CVE-2015-3770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3770"
    },
    {
      "name": "CVE-2015-3781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3781"
    },
    {
      "name": "CVE-2015-3145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3145"
    },
    {
      "name": "CVE-2013-1776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1776"
    },
    {
      "name": "CVE-2015-0228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0228"
    },
    {
      "name": "CVE-2015-3144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3144"
    },
    {
      "name": "CVE-2015-5783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5783"
    },
    {
      "name": "CVE-2015-5771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5771"
    },
    {
      "name": "CVE-2015-3775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3775"
    },
    {
      "name": "CVE-2015-3760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3760"
    },
    {
      "name": "CVE-2014-8161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8161"
    },
    {
      "name": "CVE-2015-3795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3795"
    },
    {
      "name": "CVE-2015-0242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0242"
    },
    {
      "name": "CVE-2014-8769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8769"
    },
    {
      "name": "CVE-2014-9365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9365"
    },
    {
      "name": "CVE-2015-4021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4021"
    },
    {
      "name": "CVE-2015-5755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5755"
    },
    {
      "name": "CVE-2015-3761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3761"
    },
    {
      "name": "CVE-2015-2783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2783"
    },
    {
      "name": "CVE-2015-3791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3791"
    },
    {
      "name": "CVE-2015-5772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5772"
    },
    {
      "name": "CVE-2015-5747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5747"
    },
    {
      "name": "CVE-2014-3620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3620"
    },
    {
      "name": "CVE-2015-3784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3784"
    },
    {
      "name": "CVE-2015-5774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5774"
    },
    {
      "name": "CVE-2015-0253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0253"
    },
    {
      "name": "CVE-2015-3786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3786"
    },
    {
      "name": "CVE-2015-3792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3792"
    },
    {
      "name": "CVE-2015-5776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5776"
    },
    {
      "name": "CVE-2015-5784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5784"
    },
    {
      "name": "CVE-2015-5775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5775"
    },
    {
      "name": "CVE-2015-4147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4147"
    },
    {
      "name": "CVE-2015-5754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5754"
    },
    {
      "name": "CVE-2014-8109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8109"
    },
    {
      "name": "CVE-2014-3660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3660"
    },
    {
      "name": "CVE-2015-5777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5777"
    },
    {
      "name": "CVE-2013-2777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2777"
    },
    {
      "name": "CVE-2015-3783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3783"
    },
    {
      "name": "CVE-2015-5773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5773"
    },
    {
      "name": "CVE-2015-3794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3794"
    },
    {
      "name": "CVE-2015-3777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3777"
    },
    {
      "name": "CVE-2015-3797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3797"
    },
    {
      "name": "CVE-2014-1912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-1912"
    },
    {
      "name": "CVE-2014-8767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8767"
    },
    {
      "name": "CVE-2015-3767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3767"
    },
    {
      "name": "CVE-2015-3790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3790"
    },
    {
      "name": "CVE-2015-3779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3779"
    },
    {
      "name": "CVE-2015-5768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5768"
    },
    {
      "name": "CVE-2015-3778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3778"
    },
    {
      "name": "CVE-2015-3798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3798"
    },
    {
      "name": "CVE-2015-1790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1790"
    }
  ],
  "initial_release_date": "2015-08-14T00:00:00",
  "last_revision_date": "2015-08-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-355",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-08-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0\nun attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT205031 du 13 ao\u00fbt 2015",
      "url": "https://support.apple.com/en-us/HT205031"
    }
  ]
}

CVE-2015-5782 (GCVE-0-2015-5782)

Vulnerability from cvelistv5 – Published: 2015-08-16 23:00 – Updated: 2024-08-06 06:59

Summary

ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.

Severity

No CVSS data available.

CWE

Assigner

apple

References

6 references

URL	Tags
https://support.apple.com/kb/HT205030	x_refsource_CONFIRM
http://www.securitytracker.com/id/1033275	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://www.securityfocus.com/bid/76343	vdb-entryx_refsource_BID

Date Public

2015-08-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:59:04.346Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205030"
          },
          {
            "name": "1033275",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033275"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "APPLE-SA-2015-08-13-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "76343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76343"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-22T18:57:01.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205030"
        },
        {
          "name": "1033275",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033275"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "APPLE-SA-2015-08-13-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "76343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76343"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2015-5782",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/kb/HT205030",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205030"
            },
            {
              "name": "1033275",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033275"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "APPLE-SA-2015-08-13-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "76343",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76343"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2015-5782",
    "datePublished": "2015-08-16T23:00:00.000Z",
    "dateReserved": "2015-08-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:59:04.346Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5783 (GCVE-0-2015-5783)

Vulnerability from cvelistv5 – Published: 2015-08-16 23:00 – Updated: 2024-08-06 06:59

Summary

IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770.

Severity

No CVSS data available.

CWE

Assigner

apple

References

4 references

URL	Tags
http://www.securityfocus.com/bid/76340	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://www.securitytracker.com/id/1033276	vdb-entryx_refsource_SECTRACK

Date Public

2015-08-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:59:04.412Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "76340",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76340"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "1033276",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033276"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-20T09:57:01.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "name": "76340",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76340"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "1033276",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033276"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2015-5783",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "76340",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76340"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "1033276",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033276"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2015-5783",
    "datePublished": "2015-08-16T23:00:00.000Z",
    "dateReserved": "2015-08-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:59:04.412Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5784 (GCVE-0-2015-5784)

Vulnerability from cvelistv5 – Published: 2015-08-16 23:00 – Updated: 2024-08-06 06:59

Summary

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Severity

No CVSS data available.

CWE

Assigner

apple

References

5 references

URL	Tags
http://www.securityfocus.com/bid/76340	vdb-entryx_refsource_BID
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
https://www.exploit-db.com/exploits/38137/	exploitx_refsource_EXPLOIT-DB
http://www.securitytracker.com/id/1033276	vdb-entryx_refsource_SECTRACK

Date Public

2015-08-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:59:04.386Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "76340",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76340"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "38137",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/38137/"
          },
          {
            "name": "1033276",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033276"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-08-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-20T09:57:01.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "name": "76340",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76340"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "38137",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/38137/"
        },
        {
          "name": "1033276",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033276"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2015-5784",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "76340",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76340"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "38137",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/38137/"
            },
            {
              "name": "1033276",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1033276"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2015-5784",
    "datePublished": "2015-08-16T23:00:00.000Z",
    "dateReserved": "2015-08-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:59:04.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2015-AVI-355

Solution

CVE-2015-5782 (GCVE-0-2015-5782)

CVE-2015-5783 (GCVE-0-2015-5783)

CVE-2015-5784 (GCVE-0-2015-5784)

Tags

Sightings

Nomenclature