PT-2015-7465 · Apple · Xcode

Published 2015-10-23 · Updated 2016-12-24 · CVE-2015-7030

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Xcode versions prior to 7.1

Description The issue in Apple Xcode's Swift implementation mishandles type conversion, but the specific impact and attack vectors are not detailed.

Recommendations For Apple Xcode versions prior to 7.1, update to version 7.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

CVE-2015-7030

Affected Products

Xcode

References · 4

• https://support.apple.com/HT205379 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7030 · Security Note
• http://lists.apple.com/archives/security-announce/2015/Oct/msg00008.html · Vendor Advisory
• http://securitytracker.com/id/1033930 · Note