#VU1073 Modification of Information in Apple iOS - CVE-2016-4679

Vulnerability identifier: #VU1073

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2016-4679

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Apple iOS

Software vendor:
Apple Inc.

The vulnerability allows a remote authenticated user to modify information on the target system
The weakness exists due to improper path validation logic for symlinks and lets overwrite arbitrary files.
Successfull exploitation of the vulnerability results in modification of information on the vulnerable system.

Update to version 10.1.

• https://support.apple.com/en-us/HT207271