CVE-2016-4728

Description (CNA)

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
• https://support.apple.com/HT207157
• https://support.apple.com/HT207158
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
• http://www.securitytracker.com/id/1036854
• http://www.securityfocus.com/bid/93064
• https://support.apple.com/HT207142
• https://support.apple.com/HT207143
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html

ADP enrichment