Vulnerability Description
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4768.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 10.0 |
| Apple | Iphone Os | < 10.0 |
| Apple | Tvos | < 10.0 |
| Apple | Itunes | < 12.5.1 |
| Microsoft | Windows | All versions |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing ListVendor Advisory
- http://www.securityfocus.com/bid/93067Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036854Third Party AdvisoryVDB Entry
- https://support.apple.com/HT207142Vendor Advisory
- https://support.apple.com/HT207143Vendor Advisory
- https://support.apple.com/HT207157Vendor Advisory
- https://support.apple.com/HT207158Vendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.htmlMailing ListVendor Advisory
- http://www.securityfocus.com/bid/93067Third Party AdvisoryVDB Entry
FAQ
What is CVE-2016-4767?
CVE-2016-4767 is a vulnerability with a CVSS score of 8.8 (HIGH). WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) ...
How severe is CVE-2016-4767?
CVE-2016-4767 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4767?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Iphone Os, Apple Tvos, Apple Itunes, Microsoft Windows.