CVE-2016-4769 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Itunes

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents6 sources

Severity

8.8HIGHNVD

EPSS

0.5%

top 32.84%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Itunes Apple Safari

Timeline

PublishedSep 25

Latest updateMay 17

Description

WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDapple/itunes12.4.3

▶NVDapple/safari9.1.3

🔴Vulnerability Details

GHSA

GHSA-w859-c4fc-cw6h: WebKit in Apple iTunes before 12↗2022-05-17

▶

CVEList

CVE-2016-4769: WebKit in Apple iTunes before 12↗2016-09-25

▶

OSV

CVE-2016-4769: WebKit in Apple iTunes before 12↗2016-09-25

▶

📋Vendor Advisories

Ubuntu

WebKitGTK+ vulnerabilities↗2017-01-10

▶

Apple

CVE-2016-4769: Safari 10↗2016-09-20

▶

Apple

CVE-2016-4769: iTunes 12.5.1 for Windows↗2016-09-13

▶