PT-2016-6048
CVE-2016-4591
·
Published
2016-07-21
·
Updated
2024-06-15
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 9.3.3
Safari versions prior to 9.1.2
tvOS versions prior to 9.2.2
Description
The issue concerns the mishandling of the
location variable, allowing remote attackers to access the local filesystem.Recommendations
For Apple iOS versions prior to 9.3.3, update to version 9.3.3 or later.
For Safari versions prior to 9.1.2, update to version 9.1.2 or later.
For tvOS versions prior to 9.2.2, update to version 9.2.2 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾