Vulnerability Description
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 10.0 |
| Apple | Iphone Os | < 10.0 |
| Apple | Tvos | < 10.0 |
| Apple | Itunes | < 12.5.1 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing ListVendor Advisory
- http://www.securityfocus.com/bid/93064Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036854Third Party AdvisoryVDB Entry
- https://support.apple.com/HT207142Vendor Advisory
- https://support.apple.com/HT207143Vendor Advisory
- https://support.apple.com/HT207157Vendor Advisory
- https://support.apple.com/HT207158Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing ListVendor Advisory
- http://www.securityfocus.com/bid/93064Third Party AdvisoryVDB Entry
FAQ
What is CVE-2016-4728?
CVE-2016-4728 is a vulnerability with a CVSS score of 8.8 (HIGH). WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted ...
How severe is CVE-2016-4728?
CVE-2016-4728 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4728?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Iphone Os, Apple Tvos, Apple Itunes, Microsoft Windows.