PT-2016-2044

CVE-2016-1821

Published

2016-05-20

Updated

2016-12-02

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.5

Description The issue is related to errors in pointer dereferencing in the IOAudioFamily component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

Recommendations For Apple OS X versions prior to 10.11.5, update to version 10.11.5 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

Related identifiers

CVE-2016-1821