CVE-2016-4608 libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a....
CriticalCVSS 9.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxslt(Debian:12) | < 1.1.29-1 | 1.1.29-1 |
| debian/libxslt(Debian:13) | < 1.1.29-1 | 1.1.29-1 |
| debian/libxslt(Debian:14) | < 1.1.29-1 | 1.1.29-1 |
| xmlsoft libxslt | <= 1.1.28 | No fix listed |
| apple icloud | < 5.2.1 | 5.2.1 |
| apple itunes | < 12.4.2 | 12.4.2 |
| fedoraproject fedora | = 30 | No fix listed |
References
- Debian Security Tracker CVE-2016-4608 vendor-advisory
- APPLE-SA-2016-07-18-1 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-2 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-3 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-4 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-6 mailing-list vendor-advisory
- 91826 third-party-advisory vdb-entry
- 1036348 third-party-advisory vdb-entry
- FEDORA-2019-320d5295fc vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory