WebKit as used in Apple iOS before 9.1 Safari before 9.0.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1 APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.