PT-2016-3079 · Apple+1 · Tvos+5

Publicado

2016-12-01

·

Atualizado

2020-01-23

·

CVE-2016-4764

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10 Safari versions prior to 10 iTunes versions prior to 12.5.1 tvOS versions prior to 10
Description The issue is caused by a buffer overflow in the WebKit component, allowing remote attackers to execute arbitrary code or cause a denial of service, such as memory corruption and application crash, via a specially crafted web site.
Recommendations For iOS versions prior to 10, update to version 10 or later to resolve the issue. For Safari versions prior to 10, update to version 10 or later to resolve the issue. For iTunes versions prior to 12.5.1, update to version 12.5.1 or later to resolve the issue. For tvOS versions prior to 10, update to version 10 or later to resolve the issue.

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2017-00435
CVE-2016-4764
MGASA-2017-0069
USN-3166-1

Produtos afetados

Safari
Ubuntu
Webkit
Ios
Itunes
Tvos