QwikSec

Security Database

CVE

CWE

Training

CVE-2015-1157

Published: May 28, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://support.apple.com/HT205221

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://support.apple.com/kb/HT204941

x_refsource_CONFIRM

http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/

x_refsource_MISC

https://ghostbin.com/paste/zws9m

x_refsource_MISC

http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

APPLE-SA-2015-06-30-2

vendor-advisory

x_refsource_APPLE

http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/

x_refsource_MISC

http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/

x_refsource_MISC

APPLE-SA-2015-09-16-3

vendor-advisory

x_refsource_APPLE

http://support.apple.com/kb/HT204942

x_refsource_CONFIRM

APPLE-SA-2015-06-30-1

vendor-advisory

x_refsource_APPLE

http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/

x_refsource_MISC

http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.