CVE-2015-3798

HIGH 7.5CVE-2015-3798 · Published 17/08/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3797.

References

lists.apple.com/archives/security-announce/2015/Aug/msg00001.html · Vendor Advisory
lists.apple.com/archives/security-announce/2015/Aug/msg00002.html · Vendor Advisory
securityfocus.com/bid/76343
securitytracker.com/id/1033275
code.google.com/p/google-security-research/issues/detail
support.apple.com/kb/HT205030 · Vendor Advisory
support.apple.com/kb/HT205031 · Vendor Advisory
exploit-db.com/exploits/38262

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free