CVE Catalog
CVE-2015-7113
HighSummary
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.
Risk Assessment
Exploitation of this vulnerability could lead to device takeover or instability, posing a serious threat to user data security.
Recommendation
It is recommended to update iOS systems to version 9.2 or later and watchOS to version 2.1 or later to mitigate this vulnerability.
Other vulnerabilities in LaunchServices
Original NVD description (English source)
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.