CVE-2015-7047
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:watchos | apple watchos | le | 2.0 |
References
lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
www.securityfocus.com/bid/78719
www.securitytracker.com/id/1034344
support.apple.com/HT205635
support.apple.com/HT205637
support.apple.com/HT205640
support.apple.com/HT205641
www.exploit-db.com/exploits/39371/
www.exploit-db.com/exploits/39373/
www.exploit-db.com/exploits/39374/
www.exploit-db.com/exploits/39375/
Related
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%