CVE-2015-1157

Published: May 28, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.

Affected (10)

Products: Apple: Iphone Os, Mac Os X, Itunes

3 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Version 8.0.1
Apple Iphone Os	Version 8.0.2
Apple Iphone Os	Version 8.0
Apple Iphone Os	Version 8.1.2
Apple Iphone Os	Version 8.1.3
Apple Iphone Os	Version 8.1
Apple Iphone Os	Version 8.2
Apple Iphone Os	Version 8.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.0.3

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apple Itunes	Up to 12.2

Related CWEs

References (30)

http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html

Source: product-security@apple.com

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html

Source: product-security@apple.com

PatchVendor Advisory

http://support.apple.com/kb/HT204941

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT204942

Source: product-security@apple.com

Vendor Advisory

http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083

Source: product-security@apple.com

http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/

Source: product-security@apple.com

Exploit

http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/

Source: product-security@apple.com

http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/

Source: product-security@apple.com

Exploit

http://www.securityfocus.com/bid/75491

Source: product-security@apple.com

http://www.securitytracker.com/id/1032408

Source: product-security@apple.com

http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/

Source: product-security@apple.com

Exploit

https://ghostbin.com/paste/zws9m

Source: product-security@apple.com

https://support.apple.com/HT205221

Source: product-security@apple.com

Vendor Advisory

http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://support.apple.com/kb/HT204941

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT204942

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/75491

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1032408

Source: af854a3a-2127-422b-91ae-364da2661108

http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://ghostbin.com/paste/zws9m

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT205221

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.