CVE-2015-1065

Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 UNKNOWN
ADJACENT_NETWORK
MEDIUM
AV:A/AC:M/Au:N/C:P/I:P/A:P
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
applemac_os_x
𝑥
≤ 10.10.2
appleiphone_os
𝑥
≤ 8.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html
http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html
http://www.securityfocus.com/bid/73007
http://www.securitytracker.com/id/1031864
https://support.apple.com/HT204413
https://support.apple.com/HT204423
https://support.apple.com/kb/HT204563
http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html
http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.html
http://www.securityfocus.com/bid/73007
http://www.securitytracker.com/id/1031864
https://support.apple.com/HT204413
https://support.apple.com/HT204423
https://support.apple.com/kb/HT204563