CVE-2016-4615 libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a....
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4614, CVE-2016-4616, and CVE-2016-4619.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | < 9.3.3 | 9.3.3 |
| apple mac os x | < 10.11.6 | 10.11.6 |
| apple tvOS | < 9.2.2 | 9.2.2 |
| apple watchOS | < 2.2.2 | 2.2.2 |
| apple icloud | < 5.2.1 | 5.2.1 |
| apple itunes | < 12.4.2 | 12.4.2 |
References
- APPLE-SA-2016-07-18-1 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-2 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-3 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-4 mailing-list vendor-advisory
- APPLE-SA-2016-07-18-6 mailing-list vendor-advisory
- 91826 third-party-advisory vdb-entry
- 1036348 third-party-advisory vdb-entry
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory