PT-2016-6104 · Apple · Ios

Step Wallace · Publicado 2016-09-18 · Atualizado 2017-08-13 · CVE-2016-4740

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Baixa

Vetor base

AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10

Description The issue occurs when Handoff for Messages is used, and it does not ensure that a Messages signin has occurred before displaying messages. This might allow attackers to obtain sensitive information via unspecified vectors.

Recommendations For Apple iOS versions prior to 10, update to version 10 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-4740

Produtos afetados

Ios

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-4740 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html · Aviso do Fabricante
• https://support.apple.com/HT207143 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4740 · Aviso do Fabricante
• http://securityfocus.com/bid/92932 · Nota
• http://securitytracker.com/id/1036797 · Nota