CVE-2015-3797
HighSummary
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
Risk Assessment
This vulnerability can lead to serious consequences, including system takeover or application crashes, affecting service availability.
Recommendation
It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor applications for unusual behavior.
Other vulnerabilities in TRE library in Libc
See all- CVE-2015-3798High
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
- CVE-2015-3796High
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
Original NVD description (English source)
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3798.