← back
CVE-2015-3796

CVE-2015-3796

EPSS 12.4%
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3797 and CVE-2015-3798.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/38263/unverifiedexploitdbwww.exploit-db.com/exploits/38263unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlhttps://support.apple.com/kb/HT205030https://support.apple.com/kb/HT205031https://www.exploit-db.com/exploits/38263/http://www.securityfocus.com/bid/76343http://www.securitytracker.com/id/1033275