PT-2016-2793 · Apple+2 · Libxslt+6
Nick Wellnhofer
·
Publicado
2016-09-25
·
Atualizado
2026-03-13
·
CVE-2016-4738
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
libxslt in Apple iOS versions prior to 10
libxslt in Apple OS X versions prior to 10.12
libxslt in Apple tvOS versions prior to 10
libxslt in Apple watchOS versions prior to 3
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by a buffer overflow in the libxslt component of the operating systems, which can be exploited by a remote attacker using a specially formed web site.
Recommendations
For libxslt in Apple iOS versions prior to 10, update to iOS 10 or later.
For libxslt in Apple OS X versions prior to 10.12, update to OS X 10.12 or later.
For libxslt in Apple tvOS versions prior to 10, update to tvOS 10 or later.
For libxslt in Apple watchOS versions prior to 3, update to watchOS 3 or later.
Correção
DoS
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Os X
Suse
Ubuntu
Ios
Libxslt
Tvos
Watchos