PT-2016-2099

CVE-2016-1857

·

تاريخ النشر

2016-03-29

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apple Safari (affected versions not specified) iOS (affected versions not specified)
Description The issue is caused by a buffer overflow in the WebKit component. It may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted website. The vulnerability can be exploited through a remote code execution in Apple Safari, related to a use-after-free issue in the ArrayStorage DFG Optimization.
Recommendations For Apple Safari, consider restricting access to potentially vulnerable websites until a patch is available. For iOS, as a temporary workaround, consider disabling the WebKit-related functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2016-1288
ALT-PU-2016-1335
ALT-PU-2016-1462
ALT-PU-2016-1566
ALT-PU-2016-1890
MGASA-2016-0294
OPENSUSE-SU-2024:10572-1
USN-3079-1
ZDI-16-343
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾