PT-2016-4904 · Apple · Ibooks Author

Behrouz Sadeghipour + 3 · Publicado 2016-04-05 · Atualizado 2016-12-03 · CVE-2016-1789

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iBooks Author versions prior to 2.4.1

Description The issue allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2016-1789

Produtos afetados

Ibooks Author

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-1789 · Aviso do Fabricante
• https://support.apple.com/kb/HT206224 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00008.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1789 · Nota de Segurança