CVE-2016-4609 libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a....
CriticalCVSS 9.8
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxslt(Debian:12) | < 1.1.29-1 | 1.1.29-1 |
| debian/libxslt(Debian:13) | < 1.1.29-1 | 1.1.29-1 |
| debian/libxslt(Debian:14) | < 1.1.29-1 | 1.1.29-1 |
| xmlsoft libxslt | < 1.1.29 | 1.1.29 |
| apple iphone os | < 9.3.3 | 9.3.3 |
| apple mac os x | < 10.11.6 | 10.11.6 |
| apple tvOS | < 9.2.2 | 9.2.2 |
| apple watchOS | < 2.2.2 | 2.2.2 |
| apple icloud | < 5.2.1 | 5.2.1 |
| apple itunes | < 12.4.2 | 12.4.2 |
| fedoraproject fedora | = 30 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-4609 vendor-advisory
- APPLE-SA-2016-07-18-1 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-2 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-3 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-4 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-6 mailing-list vendor-advisory
- 91826 third-party-advisory vdb-entry
- 1036348 third-party-advisory vdb-entry
- [debian-lts-announce] 20190722 [SECURITY] [DLA 1860-1] libxslt security update mailing-list third-party-advisory
- FEDORA-2019-320d5295fc vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory