Vulnerability Description
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | <= 9.1.3 |
| Apple | Iphone Os | <= 9.3.5 |
| Apple | Icloud | 5.2.1 |
| Apple | Itunes | 12.4.3 |
| Microsoft | Windows | All versions |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00013.htmlMailing ListVendor Advisory
- http://www.securityfocus.com/bid/93066
- http://www.securitytracker.com/id/1036854
- https://support.apple.com/HT207143Vendor Advisory
- https://support.apple.com/HT207147Vendor Advisory
- https://support.apple.com/HT207157Vendor Advisory
- https://support.apple.com/HT207158Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00013.htmlMailing ListVendor Advisory
- http://www.securityfocus.com/bid/93066
FAQ
What is CVE-2016-4762?
CVE-2016-4762 is a vulnerability with a CVSS score of 8.8 (HIGH). WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memor...
How severe is CVE-2016-4762?
CVE-2016-4762 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4762?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Iphone Os, Apple Icloud, Apple Itunes, Microsoft Windows.