PT-2016-3352 · Apple+1 · Ios+1

Qwertyoruiop + 2 · Publicado 2016-08-25 · Atualizado 2025-02-28 · CVE-2016-4657

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5

Description The issue is caused by a memory corruption vulnerability in the WebKit component of Apple iOS, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This can be achieved by exploiting a buffer overflow in memory.

Recommendations For versions prior to 9.3.5, update to version 9.3.5 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-787

Identificadores relacionados

ALT-PU-2016-2042

BDU:2021-04938

CVE-2016-4657

MGASA-2017-0069

USN-3166-1

Produtos afetados

Ubuntu

Ios

Referências · 62

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/jsc/CVE-2016-4734.md · Exploit
• 🔥 https://github.com/iDaN5x/Switcheroo · Exploit
• 🔥 https://github.com/vigneshyaadav27/webkit-vulnerability · Exploit
• 🔥 https://github.com/viai957/webkit-vulnerability · Exploit
• 🔥 https://github.com/Mimoja/CVE-2016-4657-NintendoSwitch · Exploit
• 🔥 https://exploit-db.com/exploits/44836 · Exploit
• 🔥❌ https://github.com/Traiver/CVE-2016-4657-Switch-Browser-Binary · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/44213 · Exploit
• 🔥 https://youtube.com/watch?v=xkdPjbaLngE · Exploit
• https://ubuntu.com/security/CVE-2016-4733 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-7578 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-4657 · Nota de Segurança
• http://securityfocus.com/bid/92653 · Nota
• https://webkitgtk.org/security/WSA-2017-0002.html · Nota