PT-2015-3061 · Apple+1 · Os X+2

Mark Brand · Published 2015-10-09 · Updated 2019-04-23 · CVE-2015-5922

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) versions prior to 53.1.0 Apple OS X versions prior to 10.11 watchOS versions prior to 2

Description The issue is related to errors in the code of the International Components for Unicode (ICU) module. Exploitation of this issue may allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations For International Components for Unicode (ICU) versions prior to 53.1.0, update to version 53.1.0 or later. For Apple OS X versions prior to 10.11, update to version 10.11 or later. For watchOS versions prior to 2, update to version 2 or later.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00266

CVE-2015-5922

Affected Products

Icu

Os X

Watchos

References · 9

• https://bdu.fstec.ru/vul/2016-00266 · Security Note
• https://support.apple.com/HT205267 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5922 · Security Note
• https://support.apple.com/HT205213 · Vendor Advisory
• http://securitytracker.com/id/1033703 · Note
• https://oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html · Note
• http://securityfocus.com/bid/76911 · Note