Lucene search

[email protected]CVE-2016-4607

HistoryJul 22, 2016 - 2:59 a.m.

CVE-2016-4607

2016-07-2202:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-4607

apple

ios

os x

denial of service

memory corruption

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.047 Low

EPSS

Percentile

92.5%

JSON

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

CPENameOperatorVersion
xmlsoft:libxsltxmlsoft libxsltlt1.1.29
apple:iphone_osapple iphone oslt9.3.3
apple:tvosapple tvoslt9.2.2
apple:mac_os_xapple mac os xlt10.11.6
apple:watchosapple watchoslt2.2.2
apple:icloudapple icloudlt5.2.1
apple:itunesapple ituneslt12.4.2
fedoraproject:fedorafedoraproject fedoraeq30

CPE	Name	Operator	Version
xmlsoft:libxslt	xmlsoft libxslt	lt	1.1.29
apple:iphone_os	apple iphone os	lt	9.3.3
apple:tvos	apple tvos	lt	9.2.2
apple:mac_os_x	apple mac os x	lt	10.11.6
apple:watchos	apple watchos	lt	2.2.2
apple:icloud	apple icloud	lt	5.2.1
apple:itunes	apple itunes	lt	12.4.2
fedoraproject:fedora	fedoraproject fedora	eq	30