CVE-2015-1157
Summary
| CVE | CVE-2015-1157 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-05-28 01:59:00 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:N/AC:L/Au:N/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Iphone Os | 8.0 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1.3 | All | All | All |
| Operating System | Apple | Iphone Os | 8.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.3 | All | All | All |
| Application | Apple | Itunes | All | All | All | All |
| Operating System | Apple | Mac Os X | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About the security content of iTunes 12.3 - Apple Support | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| APPLE-SA-2015-09-16-3 iTunes 12.3 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Patch, Vendor Advisory |
| A Simple Text Message Can Ruin Any iPhone - Zanzebek Blog | af854a3a-2127-422b-91ae-364da2661108 | zanzebek.com | Exploit |
| How to fix the iOS text message bug causing iPhone crashing/reboot (U: Apple statement, watches too) | 9to5Mac | af854a3a-2127-422b-91ae-364da2661108 | 9to5mac.com | |
| Malicious Text Message : apple | af854a3a-2127-422b-91ae-364da2661108 | www.reddit.com | Exploit |
| Apple iOS Notification Processing Flaw Lets Remote Users Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| ELI5: How that text you can send to friends turns off their phones. More info in description. : explainlikeimfive | af854a3a-2127-422b-91ae-364da2661108 | www.reddit.com | Exploit |
| APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Patch, Vendor Advisory |
| Ghostbin | af854a3a-2127-422b-91ae-364da2661108 | ghostbin.com | |
| About the security content of iOS 8.4 - Apple Support | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| About the security content of OS X Yosemite v10.10.4 and Security Update 2015-005 - Apple Support | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| About the latest iPhone Security Vulnerability : apple | af854a3a-2127-422b-91ae-364da2661108 | www.reddit.com | |
| Apple iOS bug sees Message app crash and iPhone reboot simply by receiving a message | af854a3a-2127-422b-91ae-364da2661108 | www.ibtimes.co.uk | |
| Apple Mac OS X and iOS Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| APPLE-SA-2015-06-30-1 iOS 8.4 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.