PT-2015-3061 · Apple+1 · Os X+2

Mark Brand · Publicado 2015-10-09 · Atualizado 2019-04-23 · CVE-2015-5922

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) versions prior to 53.1.0 Apple OS X versions prior to 10.11 watchOS versions prior to 2

Description The issue is related to errors in the code of the International Components for Unicode (ICU) module. Exploitation of this issue may allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations For International Components for Unicode (ICU) versions prior to 53.1.0, update to version 53.1.0 or later. For Apple OS X versions prior to 10.11, update to version 10.11 or later. For watchOS versions prior to 2, update to version 2 or later.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-00266

CVE-2015-5922

Produtos afetados

Icu

Os X

Watchos

Referências · 9

• https://bdu.fstec.ru/vul/2016-00266 · Nota de Segurança
• https://support.apple.com/HT205267 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-5922 · Nota de Segurança
• https://support.apple.com/HT205213 · Aviso do Fabricante
• http://securitytracker.com/id/1033703 · Nota
• https://oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html · Nota
• http://securityfocus.com/bid/76911 · Nota