PT-2016-6104 · Apple · Ios

Step Wallace · Published 2016-09-18 · Updated 2017-08-13 · CVE-2016-4740

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10

Description The issue occurs when Handoff for Messages is used, and it does not ensure that a Messages signin has occurred before displaying messages. This might allow attackers to obtain sensitive information via unspecified vectors.

Recommendations For Apple iOS versions prior to 10, update to version 10 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-4740

Affected Products

Ios

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-4740 · Security Note
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html · Vendor Advisory
• https://support.apple.com/HT207143 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4740 · Vendor Advisory
• http://securityfocus.com/bid/92932 · Note
• http://securitytracker.com/id/1036797 · Note