PT-2016-1546

CVE-2016-1761

·

Published

2016-03-22

·

Updated

2016-12-03

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libxml2 in Apple iOS versions prior to 9.3 libxml2 in Apple OS X versions prior to 10.11.4 libxml2 in Apple watchOS versions prior to 2.2
Description The issue is caused by a buffer overflow in the libxml2 library, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Recommendations For libxml2 in Apple iOS versions prior to 9.3, update to iOS 9.3 or later. For libxml2 in Apple OS X versions prior to 10.11.4, update to OS X 10.11.4 or later. For libxml2 in Apple watchOS versions prior to 2.2, update to watchOS 2.2 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾