PT-2016-1550 · Apple · Os X+1

Ian Beer + 1 · Publicado 2016-03-24 · Atualizado 2016-12-03 · CVE-2016-1756

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 9.3 OS X versions prior to 10.11.4

Description The issue is related to errors in pointer dereferencing in the kernel of the operating systems, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app.

Recommendations For iOS versions prior to 9.3, update to version 9.3 or later. For OS X versions prior to 10.11.4, update to version 10.11.4 or later.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2016-00851

CVE-2016-1756

Produtos afetados

Os X

Ios

Referências · 8

• https://support.apple.com/HT206167 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00851 · Nota de Segurança
• http://securitytracker.com/id/1035353 · Nota
• https://support.apple.com/HT206166 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1756 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1756 · Nota de Segurança