PT-2016-2033 · Apple · Ios+4

Karl Williamson

·

Publicado

2016-05-20

·

Atualizado

2019-03-21

·

CVE-2016-1832

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libc in Apple iOS versions prior to 9.3.2 libc in Apple OS X versions prior to 10.11.5 libc in Apple tvOS versions prior to 9.2.1 libc in Apple watchOS versions prior to 2.2.1
Description The issue allows local users to gain privileges or cause a denial of service due to memory corruption. It is also reported that the vulnerability can be exploited by a remote attacker to execute arbitrary code or cause a denial of service via a specially crafted XML document.
Recommendations For iOS versions prior to 9.3.2, update to version 9.3.2 or later. For OS X versions prior to 10.11.5, update to version 10.11.5 or later. For tvOS versions prior to 9.2.1, update to version 9.2.1 or later. For watchOS versions prior to 2.2.1, update to version 2.2.1 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2016-01384
CVE-2016-1832

Produtos afetados

Os X
Ios
Libc
Tvos
Watchos