CVE-2016-4764 — Apple Iphone OS vulnerability

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	iphone_os	<= 9.3.5	—
apple	itunes	<= 12.5	—
apple	itunes_12.5.1_for_windows	—	—
apple	safari	<= 9.1.3	—
apple	safari	—	—
apple	tvos	<= 9.2.2	—
apple	tvos	—	—

Ubuntu

WebKitGTK+ vulnerabilities

vendor_ubuntu·2017-01-10

CVE-2016-4613 WebKitGTK+ vulnerabilities Title: WebKitGTK+ vulnerabilities Summary: Several security issues were fixed in WebKitGTK+. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Instructions: This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK+, such as Epiphany, to make all the necessary changes.

Apple

CVE-2016-4764: Safari 10

vendor_apple·2016-09-20·CVSS 8.8

CVE-2016-4764 [HIGH] CVE-2016-4764: Safari 10 Apple Security Update: About the security content of Safari 10 Product: Safari Version: 10 CVE: CVE-2016-4764 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed through improved state management.

Apple

CVE-2016-4764: tvOS 10

vendor_apple·2016-09-13·CVSS 8.8

CVE-2016-4764 [HIGH] CVE-2016-4764: tvOS 10 Apple Security Update: About the security content of tvOS 10 Product: tvOS Version: 10 CVE: CVE-2016-4764 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed through improved state management.

Apple

CVE-2016-4764: iOS 10

vendor_apple·2016-09-13·CVSS 8.8

CVE-2016-4764 [HIGH] CVE-2016-4764: iOS 10 Apple Security Update: About the security content of iOS 10 Product: iOS Version: 10 CVE: CVE-2016-4764 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed through improved state management.

Apple

CVE-2016-4764: iTunes 12.5.1 for Windows

vendor_apple·2016-09-13·CVSS 8.8

CVE-2016-4764 [HIGH] CVE-2016-4764: iTunes 12.5.1 for Windows Apple Security Update: About the security content of iTunes 12.5.1 for Windows Product: iTunes 12.5.1 for Windows CVE: CVE-2016-4764 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed through improved state management.

GHSA

GHSA-98q8-3jx3-w7qm: An issue was discovered in certain Apple products

ghsa_unreviewed·2022-05-13

CVE-2016-4764 [HIGH] CWE-119 GHSA-98q8-3jx3-w7qm: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

OSV

CVE-2016-4764: An issue was discovered in certain Apple products

osv·2016-12-01·CVSS 8.8

CVE-2016-4764 [HIGH] CVE-2016-4764: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

CVE-2016-4764: An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is…

Affected

CVSS provenance