CVE-2015-3734

Vulnerability

CVE-2015-3734 is a memory corruption vulnerability in the WebKit component used by Apple iOS versions prior to 8.4.1 and Safari versions prior to 6.2.8 (for OS X Mountain Lion v10.8.5 and later) and prior to 7.1.8 and 8.0.8 (for OS X Mavericks v10.9.5 and Yosemite v10.10.4). The bug is reachable when a user visits a maliciously crafted webpage, triggering a memory corruption condition [1][2].

Exploitation

An attacker only needs to convince a user to visit a specially crafted website; no additional authentication or network position beyond standard web access is required. The vulnerability is triggered upon page load, leading to memory corruption and potential application crash [2].

Impact

Successful exploitation allows an attacker to cause a denial of service (application crash) or, more critically, execute arbitrary code on the targeted device in the context of the WebKit process. This can lead to full remote code execution (RCE) with the privileges of the user running Safari or the affected app using WebView [1][2].

Mitigation

Apple released fixes in iOS 8.4.1 on August 13, 2015 [1] and in Safari 6.2.8, 7.1.8, and 8.0.8 on the same date [2]. Users should update to these or later versions. No workaround is available; applying the security update is the only remediation.