Kritik CVSS 9.8
CVE-2016-4658: Iphone Os: güvenlik açığı
Açıklama (NVD)
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
Özet bilgiler
- Ürün
- Apple Iphone Os
- CVSS v3.1
- 9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %8,56 (yüzdelik 95)
- CWE
- CWE-119
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| apple-iphone-os | — | — | 10.0 |
| apple-mac-os-x | — | — | 10.12 |
| apple-tvos | — | — | 10.0 |
| apple-watchos | — | — | 3.0 |
| xmlsoft-libxml2 | — | — | 2.9.5 |
Kaynaklar
- NVD kaydı
- lists.apple.com
- lists.apple.com
- lists.apple.com
- lists.apple.com
- www.securityfocus.com
- www.securitytracker.com
- www.securitytracker.com
- git.gnome.org
- security.gentoo.org
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- lists.apple.com
- lists.apple.com
- lists.apple.com
- lists.apple.com
- www.securityfocus.com
- www.securitytracker.com
- www.securitytracker.com
- git.gnome.org
- security.gentoo.org
- support.apple.com
- support.apple.com
- CWE-119