Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/07/2015 Updated: 30/12/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

CoreGraphics in Apple iOS prior to 8.4 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3724.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os

Fuzzing PDFs like its 1990s This is the fuzzer I made to fuzz Preview on macOS and iOS like 8years back when I just started fuzzing things Some disclosed vulnerabilities: CVE-2015-3723 CVE-2016-1737 CVE-2016-1740 CVE-2017-7031 Info The basic idea of this fuzzer was to mutate the streams of the pdf files without screwing the PDF Structure as a whole I collected some hundreds

CWE-119 http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html http://support.apple.com/kb/HT204941 http://www.securityfocus.com/bid/75490 http://www.securitytracker.com/id/1032761 https://nvd.nist.gov https://github.com/ant4g0nist/fuzzing-pdfs-like-its-1990s

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-3723

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect