WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767, and CVE-2016-4768.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767, and CVE-2016-4768.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html | vendor-advisory x_refsource_APPLE |
| https://support.apple.com/HT207157 | x_refsource_CONFIRM |
| https://support.apple.com/HT207158 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/93067 | vdb-entry x_refsource_BID |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html | vendor-advisory x_refsource_APPLE |
| http://www.securitytracker.com/id/1036854 | vdb-entry x_refsource_SECTRACK |
| https://support.apple.com/HT207142 | x_refsource_CONFIRM |
| https://support.apple.com/HT207143 | x_refsource_CONFIRM |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html | vendor-advisory x_refsource_APPLE |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html | vendor-advisory x_refsource_APPLE |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html | vendor-advisory x_refsource_APPLE x_transferred |
| https://support.apple.com/HT207157 | x_refsource_CONFIRM x_transferred |
| https://support.apple.com/HT207158 | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/93067 | vdb-entry x_refsource_BID x_transferred |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html | vendor-advisory x_refsource_APPLE x_transferred |
| http://www.securitytracker.com/id/1036854 | vdb-entry x_refsource_SECTRACK x_transferred |
| https://support.apple.com/HT207142 | x_refsource_CONFIRM x_transferred |
| https://support.apple.com/HT207143 | x_refsource_CONFIRM x_transferred |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html | vendor-advisory x_refsource_APPLE x_transferred |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html | vendor-advisory x_refsource_APPLE x_transferred |
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767, and CVE-2016-4768.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 8.8 | HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| Primary | 2.0 | 6.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html | product-security@apple.com | Mailing List Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html | product-security@apple.com | Mailing List Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html | product-security@apple.com | Issue Tracking Mailing List Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html | product-security@apple.com | Issue Tracking Mailing List Vendor Advisory |
| http://www.securityfocus.com/bid/93067 | product-security@apple.com | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1036854 | product-security@apple.com | Third Party Advisory VDB Entry |
| https://support.apple.com/HT207142 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/HT207143 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/HT207157 | product-security@apple.com | Vendor Advisory |
| https://support.apple.com/HT207158 | product-security@apple.com | Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html | af854a3a-2127-422b-91ae-364da2661108 | Mailing List Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html | af854a3a-2127-422b-91ae-364da2661108 | Mailing List Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Mailing List Vendor Advisory |
| http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Mailing List Vendor Advisory |
| http://www.securityfocus.com/bid/93067 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1036854 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://support.apple.com/HT207142 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/HT207143 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/HT207157 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| https://support.apple.com/HT207158 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |