CVE-2015-3717: apple iphone_os Classic Buffer Overflow

Vulnerability summary

CVE-2015-3717 is a high (CVSS 7.5) Classic Buffer Overflow vulnerability in apple iphone_os. EPSS estimates a 4.47% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities.

Timeline

1. 03-07-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.