CVE-2015-6989

Vulnerability

A memory corruption vulnerability exists in Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 [1][2][3]. The flaw occurs when a crafted package is mishandled during dispatch calls, leading to a memory corruption that can be triggered by processing malicious input [1][2][3].

Exploitation

An attacker can exploit this vulnerability by delivering a specially crafted package to the target system [1][2][3]. The package is mishandled during dispatch calls, causing memory corruption [1][2][3]. The attacker does not require elevated privileges to trigger the vulnerability, as it can be exploited via user interaction, such as opening a maliciously crafted archive or file [1][2][3].

Impact

Successful exploitation can lead to arbitrary code execution or denial of service via memory corruption [1][2][3]. The attacker could gain the ability to execute arbitrary code with the privileges of the affected application, potentially leading to full system compromise [1][2][3].

Mitigation

Apple has addressed this vulnerability in iOS 9.1, OS X El Capitan 10.11.1, and watchOS 2.0.1 [1][2][3]. Users should update to the latest versions of their respective operating systems. No workarounds are available [1][2][3].