Memory corruption in Apple Safari - CVE-2016-4743
Published: March 12, 2018 / Updated: March 21, 2018
Vulnerability identifier: #VU10913
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-4743
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition or obtain potentially sensitive information on the target system.
The weakness exists due to boundary error. A remote attacker can send a specially crafted input, trick the victim into opening it, trigger memory corruption, gain access to potentially sensitive information and cause the service to crash.
The weakness exists due to boundary error. A remote attacker can send a specially crafted input, trick the victim into opening it, trigger memory corruption, gain access to potentially sensitive information and cause the service to crash.
Affected software
Apple Safari
How to mitigate CVE-2016-4743
Update to version 10.0.2.