CVE-2016-4728

EPSS 1.04%
Veröffentlicht 25.09.2016 10:59:32
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 10.0

Apple ≫ iPhone OS Version < 10.0

Apple ≫ tvOS Version < 10.0

Apple ≫ iTunes Version < 12.5.1

Microsoft ≫ Windows Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.04%	0.765

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html

Vendor Advisory

Mailing List

http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html

Vendor Advisory

Mailing List

https://support.apple.com/HT207142

Vendor Advisory

https://support.apple.com/HT207143

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html

Vendor Advisory