PT-2016-6126

CVE-2016-4769

Publicado

2016-09-25

Atualizado

2017-07-30

Descrição por

CVSS 3.1

8.8

Alta

MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 12.5.1 Safari versions prior to 10

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

Recommendations For Apple iTunes versions prior to 12.5.1, update to version 12.5.1 or later. For Safari versions prior to 10, update to version 10 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Tongbo Luo

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados

CVE-2016-4769

MGASA-2017-0069