PT-2016-1185 · Apple+1 · Webkit+4

Publicado

2016-01-22

·

Atualizado

2019-03-25

·

CVE-2016-1727

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Safari versions prior to 9.0.3 iOS versions prior to 9.2.1 tvOS versions prior to 9.1.1
Description The issue is caused by a buffer overflow in the WebKit component. It allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted web site.
Recommendations For Safari versions prior to 9.0.3, update to version 9.0.3 or later. For iOS versions prior to 9.2.1, update to version 9.2.1 or later. For tvOS versions prior to 9.1.1, update to version 9.1.1 or later.

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1045
BDU:2016-00446
CVE-2016-1727
MGASA-2016-0116

Produtos afetados

Alt Linux
Safari
Webkit
Ios
Tvos