PT-2016-1530 · Apple · Webkit+2

0X1Byte + 1 · Publicado 2016-03-22 · Atualizado 2018-10-09 · CVE-2016-1778

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9.1 Apple iOS versions prior to 9.3

Description The issue is related to errors in resource management in the WebKit component of Safari and iOS. It can be exploited by a remote attacker using a specially crafted website, potentially allowing the execution of arbitrary code or causing a denial of service due to memory corruption.

Recommendations For Apple Safari versions prior to 9.1, update to version 9.1 or later. For Apple iOS versions prior to 9.3, update to version 9.3 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2016-00831

CVE-2016-1778

ZDI-16-200

Produtos afetados

Safari

Webkit

Ios

Referências · 15

• http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html · Aviso do Fabricante
• https://support.apple.com/HT206171 · Aviso do Fabricante
• https://webkitgtk.org/security/WSA-2016-0003.html · Nota
• http://securityfocus.com/archive/1/537948/100/0/threaded · Nota
• https://support.apple.com/HT206166 · Aviso do Fabricante
• http://securitytracker.com/id/1035353 · Nota
• https://ubuntu.com/security/CVE-2016-1778 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1778 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-16-200 · Nota
• https://osv.dev/vulnerability/CVE-2016-1778 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00831 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-1778 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-16-200 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2016-1778 · Nota de Segurança