ByteOS Network

CVE Vulnerability Details :

CVE-2016-1840

PUBLISHED

More Info Official Page

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-20 May, 2016 | 10:00

Updated At-05 Aug, 2024 | 23:10

▼CVE Numbering Authority (CNA)

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory x_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
https://support.apple.com/HT206567	x_refsource_CONFIRM
http://www.securityfocus.com/bid/90691	vdb-entry x_refsource_BID
https://www.debian.org/security/2016/dsa-3593	vendor-advisory x_refsource_DEBIAN
https://bugzilla.gnome.org/show_bug.cgi?id=757711	x_refsource_CONFIRM
http://xmlsoft.org/news.html	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory x_refsource_APPLE
http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory x_refsource_UBUNTU
https://support.apple.com/HT206566	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory x_refsource_APPLE
https://support.apple.com/HT206564	x_refsource_CONFIRM
https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory x_refsource_REDHAT
https://security.gentoo.org/glsa/201701-37	vendor-advisory x_refsource_GENTOO
http://www.securitytracker.com/id/1035890	vdb-entry x_refsource_SECTRACK
http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory x_refsource_APPLE
https://support.apple.com/HT206568	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory x_refsource_APPLE

Hyperlink: http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://kc.mcafee.com/corporate/index?page=content&id=SB10170

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/errata/RHSA-2016:1292

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT206567

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/90691

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://www.debian.org/security/2016/dsa-3593

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://bugzilla.gnome.org/show_bug.cgi?id=757711

Resource:

x_refsource_CONFIRM

Hyperlink: http://xmlsoft.org/news.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.ubuntu.com/usn/USN-2994-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://support.apple.com/HT206566

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.tenable.com/security/tns-2016-18

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2016/May/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: https://support.apple.com/HT206564

Resource:

x_refsource_CONFIRM

Hyperlink: https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-2957.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://security.gentoo.org/glsa/201701-37

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securitytracker.com/id/1035890

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: https://support.apple.com/HT206568

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM x_transferred
https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM x_transferred
https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory x_refsource_REDHAT x_transferred
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT206567	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/90691	vdb-entry x_refsource_BID x_transferred
https://www.debian.org/security/2016/dsa-3593	vendor-advisory x_refsource_DEBIAN x_transferred
https://bugzilla.gnome.org/show_bug.cgi?id=757711	x_refsource_CONFIRM x_transferred
http://xmlsoft.org/news.html	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://support.apple.com/HT206566	x_refsource_CONFIRM x_transferred
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM x_transferred
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
https://support.apple.com/HT206564	x_refsource_CONFIRM x_transferred
https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory x_refsource_REDHAT x_transferred
https://security.gentoo.org/glsa/201701-37	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securitytracker.com/id/1035890	vdb-entry x_refsource_SECTRACK x_transferred
http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
https://support.apple.com/HT206568	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred