PT-2016-2033 · Apple · Ios+4
Karl Williamson
·
Published
2016-05-20
·
Updated
2019-03-21
·
CVE-2016-1832
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libc in Apple iOS versions prior to 9.3.2
libc in Apple OS X versions prior to 10.11.5
libc in Apple tvOS versions prior to 9.2.1
libc in Apple watchOS versions prior to 2.2.1
Description
The issue allows local users to gain privileges or cause a denial of service due to memory corruption. It is also reported that the vulnerability can be exploited by a remote attacker to execute arbitrary code or cause a denial of service via a specially crafted XML document.
Recommendations
For iOS versions prior to 9.3.2, update to version 9.3.2 or later.
For OS X versions prior to 10.11.5, update to version 10.11.5 or later.
For tvOS versions prior to 9.2.1, update to version 9.2.1 or later.
For watchOS versions prior to 2.2.1, update to version 2.2.1 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Os X
Ios
Libc
Tvos
Watchos