CVE-2015-1157
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 5.6%
CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.
Affected products
n/a · n/aReferences
http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00003.htmlhttps://ghostbin.com/paste/zws9mhttps://support.apple.com/HT205221http://support.apple.com/kb/HT204941http://support.apple.com/kb/HT204942http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/