PT-2016-2024 · Apple+1 · Ios+5

Richard Shupak

·

Publicado

2016-05-20

·

Atualizado

2019-06-18

·

CVE-2016-1841

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libxslt versions prior to those in Apple iOS 9.3.2, OS X 10.11.5, tvOS 9.2.1, and watchOS 2.2.1
Description The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is due to a buffer overflow in the libxslt library.
Recommendations For versions prior to those in Apple iOS 9.3.2, update to iOS 9.3.2 or later. For versions prior to OS X 10.11.5, update to OS X 10.11.5 or later. For versions prior to tvOS 9.2.1, update to tvOS 9.2.1 or later. For versions prior to watchOS 2.2.1, update to watchOS 2.2.1 or later.

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2016-01375
CVE-2016-1841
USN-3271-1

Produtos afetados

Os X
Ubuntu
Ios
Libxslt
Tvos
Watchos