PT-2016-1530 · Apple · Webkit+2

0X1Byte + 1 · Published 2016-03-22 · Updated 2018-10-09 · CVE-2016-1778

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9.1 Apple iOS versions prior to 9.3

Description The issue is related to errors in resource management in the WebKit component of Safari and iOS. It can be exploited by a remote attacker using a specially crafted website, potentially allowing the execution of arbitrary code or causing a denial of service due to memory corruption.

Recommendations For Apple Safari versions prior to 9.1, update to version 9.1 or later. For Apple iOS versions prior to 9.3, update to version 9.3 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2016-00831

CVE-2016-1778

ZDI-16-200

Affected Products

Safari

Webkit

Ios

References · 15

• http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html · Vendor Advisory
• https://support.apple.com/HT206171 · Vendor Advisory
• https://support.apple.com/HT206166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1778 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1778 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1778 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00831 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-1778 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-16-200 · Security Note
• https://cve.org/CVERecord?id=CVE-2016-1778 · Security Note
• https://webkitgtk.org/security/WSA-2016-0003.html · Note
• http://securityfocus.com/archive/1/537948/100/0/threaded · Note
• http://securitytracker.com/id/1035353 · Note
• http://zerodayinitiative.com/advisories/ZDI-16-200 · Note