Modification of Information in Apple iOS - CVE-2016-4679
Published: October 26, 2016
Vulnerability identifier: #VU1073
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2016-4679
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Apple Inc.
Affected software:
Apple iOS
Apple iOS
Detailed vulnerability description
The vulnerability allows a remote authenticated user to modify information on the target system
The weakness exists due to improper path validation logic for symlinks and lets overwrite arbitrary files.
Successfull exploitation of the vulnerability results in modification of information on the vulnerable system.
The weakness exists due to improper path validation logic for symlinks and lets overwrite arbitrary files.
Successfull exploitation of the vulnerability results in modification of information on the vulnerable system.
How to mitigate CVE-2016-4679
Update to version 10.1.