CVEvulnerability
CVE-2015-1157
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-05-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-17
Description
CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.
Affected configurations
• apple iphone os 8.0
• apple iphone os 8.0.1
• apple iphone os 8.0.2
• apple iphone os 8.1
• apple iphone os 8.1.2
• apple iphone os 8.1.3
• apple iphone os 8.2
• apple iphone os 8.3
• apple mac os x (<= 10.0.3)
• apple itunes (<= 12.2)
Related
Weakness · not in database (1)
References
- http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/ 9to5mac.com
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html Patch, Vendor Advisory
- http://support.apple.com/kb/HT204941 Vendor Advisory
- http://support.apple.com/kb/HT204942 Vendor Advisory
- http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083 www.ibtimes.co.uk
- http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/ Exploit
- http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/ www.reddit.com
- http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/ Exploit
- http://www.securityfocus.com/bid/75491 www.securityfocus.com
- http://www.securitytracker.com/id/1032408 www.securitytracker.com
- http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/ Exploit
- https://ghostbin.com/paste/zws9m ghostbin.com
- https://support.apple.com/HT205221 Vendor Advisory
- http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/ 9to5mac.com
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html Patch, Vendor Advisory
- http://support.apple.com/kb/HT204941 Vendor Advisory
- http://support.apple.com/kb/HT204942 Vendor Advisory
- http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083 www.ibtimes.co.uk
- http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/ Exploit
- http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/ www.reddit.com
- http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/ Exploit
- http://www.securityfocus.com/bid/75491 www.securityfocus.com
- http://www.securitytracker.com/id/1032408 www.securitytracker.com
- http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/ Exploit
- https://ghostbin.com/paste/zws9m ghostbin.com
- https://support.apple.com/HT205221 Vendor Advisory