PT-2016-3352 · Apple+1 · Ios+1

Qwertyoruiop + 2 · Published 2016-08-25 · Updated 2025-02-28 · CVE-2016-4657

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5

Description The issue is caused by a memory corruption vulnerability in the WebKit component of Apple iOS, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This can be achieved by exploiting a buffer overflow in memory.

Recommendations For versions prior to 9.3.5, update to version 9.3.5 or later to resolve the issue.

Exploit

Fix

DoS

RCE

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

ALT-PU-2016-2042

BDU:2021-04938

CVE-2016-4657

MGASA-2017-0069

USN-3166-1

Affected Products

Ubuntu

Ios

References · 62

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_trident.rb · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/jsc/CVE-2016-4734.md · Exploit
• 🔥 https://github.com/iDaN5x/Switcheroo · Exploit
• 🔥 https://github.com/vigneshyaadav27/webkit-vulnerability · Exploit
• 🔥 https://github.com/viai957/webkit-vulnerability · Exploit
• 🔥 https://github.com/Mimoja/CVE-2016-4657-NintendoSwitch · Exploit
• 🔥 https://exploit-db.com/exploits/44836 · Exploit
• 🔥❌ https://github.com/Traiver/CVE-2016-4657-Switch-Browser-Binary · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/44213 · Exploit
• 🔥 https://youtube.com/watch?v=xkdPjbaLngE · Exploit
• https://ubuntu.com/security/CVE-2016-4733 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7578 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-4657 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-4657 · Security Note
• https://ubuntu.com/security/CVE-2016-4764 · Vendor Advisory