PT-2016-1537 · Apple · Safari

Russ Cox · Publicado 2016-03-24 · Atualizado 2017-03-24 · CVE-2016-1771

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9.1

Description The issue is related to the incorrect handling of file expansion in the Downloads feature of Apple Safari, allowing remote attackers to cause a denial of service via a specially crafted web site.

Recommendations For versions prior to 9.1, update to version 9.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

BDU:2016-00838

CVE-2016-1771

Produtos afetados

Safari

Referências · 7

• http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html · Aviso do Fabricante
• https://support.apple.com/HT206171 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00838 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1771 · Aviso do Fabricante
• http://securitytracker.com/id/1035354 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1771 · Nota de Segurança
• http://securityfocus.com/bid/85055 · Nota