CVE-2016-4749 — Sensitive Information Exposure in Apple Iphone OS

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 82.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple IOS
Timeline
PublishedSep 18
Latest updateMay 17

Description

Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDapple/iphone_os9.3.5
▶Appleapple/ios10

🔴Vulnerability Details

1
GHSA
GHSA-9848-6q28-92jw: Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by rea↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2016-4749: iOS 10↗2016-09-13
▶