PT-2016-2099

CVE-2016-1857

·

Published

2016-03-29

·

Updated

2024-06-15

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apple Safari (affected versions not specified) iOS (affected versions not specified)
Description The issue is caused by a buffer overflow in the WebKit component. It may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted website. The vulnerability can be exploited through a remote code execution in Apple Safari, related to a use-after-free issue in the ArrayStorage DFG Optimization.
Recommendations For Apple Safari, consider restricting access to potentially vulnerable websites until a patch is available. For iOS, as a temporary workaround, consider disabling the WebKit-related functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-1288
ALT-PU-2016-1335
ALT-PU-2016-1462
ALT-PU-2016-1566
ALT-PU-2016-1890
MGASA-2016-0294
OPENSUSE-SU-2024:10572-1
USN-3079-1
ZDI-16-343
Found an issue in the description? Have something to add? Feel free to write us 👾