CVE-2015-3717 Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service....
HighCVSS 7.5
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SQLite | < 3.8.9 | 3.8.9 |
| apple mac os x | < 10.10.4 | 10.10.4 |
| apple iphone os | < 8.4 | 8.4 |
References
- APPLE-SA-2015-06-30-1 mailing-list vendor-advisory
- APPLE-SA-2015-06-30-2 mailing-list patch vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- 75491 third-party-advisory vdb-entry
- 1032760 third-party-advisory vdb-entry