CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs, which allows remote attackers to execute arbitrary code via a crafted web site.
| Software | From | Fixed in |
|---|---|---|
| apple / iphone_os | - | 8.2.x |
| apple / mac_os_x | - | 10.10.2.x |