CVE-2015-3687

Vulnerability

A memory corruption vulnerability exists in CoreText, the text layout and rendering engine in Apple iOS and OS X. The bug is triggered when processing a specially crafted text file. Affected versions are iOS before 8.4 and OS X before 10.10.4. This issue is one of several CoreText memory corruption flaws, as described in the iTunes 12.3 security content [3].

Exploitation

An attacker can exploit this vulnerability remotely by delivering a malicious text file to a target user. The user must open the crafted file in an application that uses CoreText for text rendering. No authentication is required, but user interaction (such as opening a file or viewing a webpage containing the text) is needed [3].

Impact

Successful exploitation could allow arbitrary code execution or cause a denial of service (application termination). Code execution would occur in the context of the application using CoreText, potentially leading to full system compromise depending on the application's privileges [3].

Mitigation

Apple addressed this vulnerability in iOS 8.4 and OS X Yosemite 10.10.4, both released in June 2015. The fix is also included in iTunes 12.3 for Windows. Users should update their devices to the latest available versions. No workarounds are documented [1][2][3].