The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.
References
Link | Resource |
---|---|
http://lists.apple.com/archives/security-announce/2015/Oct/msg00000.html | Vendor Advisory |
https://support.apple.com/HT205373 | Vendor Advisory |
http://www.securitytracker.com/id/1033826 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1033823 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1033825 | Third Party Advisory VDB Entry |
Information
Published : 2015-10-18 12:59
Updated : 2016-12-08 08:13
NVD link : CVE-2015-7033
Mitre link : CVE-2015-7033
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
apple
- keynote
- pages
- iwork
- numbers