CVE-2015-7039

MEDIUM 6.8CVE-2015-7039 · Published 11/12/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7038.

References

lists.apple.com/archives/security-announce/2015/Dec/msg00000.html · Vendor Advisory
lists.apple.com/archives/security-announce/2015/Dec/msg00001.html · Vendor Advisory
lists.apple.com/archives/security-announce/2015/Dec/msg00002.html · Vendor Advisory
lists.apple.com/archives/security-announce/2015/Dec/msg00005.html · Vendor Advisory
securityfocus.com/bid/78719
securitytracker.com/id/1034344
support.apple.com/HT205635 · Vendor Advisory
support.apple.com/HT205637 · Vendor Advisory
support.apple.com/HT205640 · Vendor Advisory
support.apple.com/HT205641 · Vendor Advisory
exploit-db.com/exploits/38917

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free