CVE-2016-1788
published 2016-03-24CVE-2016-1788: Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows…
PriorityP433medium5.9CVSS 3.0
AVNACHPRNUINSUCHINAN
EPSS
1.97%
78.3th percentile
Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | <= 9.2.1 | — |
| apple | mac_os_x | <= 10.11.3 | — |
| apple | os_x_el_capitan_v10.11.4_and_security_update_2016-002 | — | — |
| apple | watchos | <= 2.1 | — |
| apple | watchos | — | — |
CVSS provenance
nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2016-1788: iOS 9.3
vendor_apple·CVSS 5.9
CVE-2016-1788 [MEDIUM] CVE-2016-1788: iOS 9.3
Apple Security Update: About the security content of iOS 9.3
Product: iOS
Version: 9.3
CVE: CVE-2016-1788
Component: CVE-ID
Apple
CVE-2016-1788: watchOS 2.2
vendor_apple·CVSS 5.9
CVE-2016-1788 [MEDIUM] CVE-2016-1788: watchOS 2.2
Apple Security Update: About the security content of watchOS 2.2
Product: watchOS
Version: 2.2
CVE: CVE-2016-1788
Component: CVE-ID
Apple
CVE-2016-1788: OS X El Capitan v10.11.4 and Security Update 2016-002
vendor_apple·CVSS 5.9
CVE-2016-1788 [MEDIUM] CVE-2016-1788: OS X El Capitan v10.11.4 and Security Update 2016-002
Apple Security Update: About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002
Product: OS X El Capitan v10.11.4 and Security Update 2016-002
CVE: CVE-2016-1788
Component: CVE-ID
GHSA
GHSA-33c7-37w4-x2xm: Messages in Apple iOS before 9
ghsa_unreviewed·2022-05-17
CVE-2016-1788 [MEDIUM] GHSA-33c7-37w4-x2xm: Messages in Apple iOS before 9
Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2016/Mar/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlhttp://www.securitytracker.com/id/1035353https://support.apple.com/HT206166https://support.apple.com/HT206167https://support.apple.com/HT206168http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2016/Mar/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlhttp://www.securitytracker.com/id/1035353https://support.apple.com/HT206166https://support.apple.com/HT206167https://support.apple.com/HT206168
2016-03-24
Published