PT-2016-2797 · Apple+1 · Ios+3

Natashenka · Published 2016-09-25 · Updated 2019-03-12 · CVE-2016-4734

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS and Safari (affected versions not specified)

Description The issue is caused by a buffer overflow in the WebKit component, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by visiting a specially crafted website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2016-2042

BDU:2016-02200

CVE-2016-4734

MGASA-2017-0069

USN-3166-1

Affected Products

Safari

Ubuntu

Webkit

Ios

References · 50

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/jsc/CVE-2016-4734.md · Exploit
• 🔥 https://github.com/Mimoja/CVE-2016-4657-NintendoSwitch · Exploit
• 🔥❌ https://github.com/Traiver/CVE-2016-4657-Switch-Browser-Binary · Exploit, Deleted
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4733 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7578 · Vendor Advisory
• https://support.apple.com/HT207157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4764 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4728 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4613 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4765 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4734 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-02200 · Security Note