PT-2016-2797 · Apple+1 · Ios+3

Natashenka · Publicado 2016-09-25 · Atualizado 2019-03-12 · CVE-2016-4734

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS and Safari (affected versions not specified)

Description The issue is caused by a buffer overflow in the WebKit component, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by visiting a specially crafted website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-2042

BDU:2016-02200

CVE-2016-4734

MGASA-2017-0069

USN-3166-1

Produtos afetados

Safari

Ubuntu

Webkit

Ios

Referências · 50

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/jsc/CVE-2016-4734.md · Exploit
• 🔥 https://github.com/Mimoja/CVE-2016-4657-NintendoSwitch · Exploit
• 🔥❌ https://github.com/Traiver/CVE-2016-4657-Switch-Browser-Binary · Exploit, Deleted
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4734 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4733 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-7578 · Aviso do Fabricante
• https://support.apple.com/HT207157 · Aviso do Fabricante
• https://webkitgtk.org/security/WSA-2017-0002.html · Nota
• https://ubuntu.com/security/CVE-2016-4764 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4728 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=19721 · Nota
• https://ubuntu.com/security/CVE-2016-4613 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4765 · Aviso do Fabricante