PT-2016-6126

CVE-2016-4769

Published

2016-09-25

Updated

2017-07-30

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 12.5.1 Safari versions prior to 10

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

Recommendations For Apple iTunes versions prior to 12.5.1, update to version 12.5.1 or later. For Safari versions prior to 10, update to version 10 or later.

Exploitability

Fix

Impacts

Researchers

Tongbo Luo

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2016-4769

MGASA-2017-0069