CVE-2015-1118

Vulnerability

A memory corruption vulnerability exists in the libnetcore component of Apple iOS before 8.3, OS X before 10.10.3, and Apple TV before 7.2 [1][2][3]. The issue is triggered when the system processes a specially crafted configuration profile. No special configuration beyond processing an untrusted profile is required to reach the vulnerable code path.

Exploitation

An attacker must deliver a malicious configuration profile to a target device. This can be done by tricking the user into installing the profile, such as through a phishing email, a malicious website, or by having physical access to the device. Once the profile is installed, the system parses the crafted data, leading to memory corruption.

Impact

Successful exploitation results in a denial of service (DoS) due to memory corruption, causing the application processing the profile to crash. No code execution or privilege escalation has been described in the available references; only system instability and crashes are mentioned.

Mitigation

Apple released fixes as part of iOS 8.3, OS X Yosemite 10.10.3 (and Security Update 2015-004), and Apple TV 7.2 [1][2][3]. Users should update their devices to these or later versions. There is no known workaround for unpatched systems.