CVE-2016-4669
38Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 3.7%
de la publicación al arma0 días
Publicada en NVD20 feb
1ª PoC31 oct
metasploit25 ago
probabilidad de explotación
3.7%top 11% de las CVE
explotación observada
noninguna fuente lo reporta
4 exploit(s) público(s)
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service (MIG code mishandling and system crash) via unspecified vectors.
Productos afectados
n/a · n/aPoCs públicas encontradas — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/40654githubgithub.com/i-o-s/CVE-2016-4669★ 0cve_referencepacketstormsecurity.com/files/158874/Safari-Webkit-For-iOS-7.1.2-JIT-Optimization-Bug.htmlno verificadocve_referencewww.exploit-db.com/exploits/40654/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/158874/Safari-Webkit-For-iOS-7.1.2-JIT-Optimization-Bug.htmlhttps://support.apple.com/HT207269https://support.apple.com/HT207270https://support.apple.com/HT207271https://support.apple.com/HT207275https://www.exploit-db.com/exploits/40654/http://www.securityfocus.com/bid/93849http://www.securitytracker.com/id/1037086