Memory corruption in Apple Safari - CVE-2016-4743
Published: March 12, 2018 / Updated: March 21, 2018
Vulnerability identifier: #VU10913
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2016-4743
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Apple Inc.
Affected software:
Apple Safari
Apple Safari
Detailed vulnerability description
The vulnerability allows a remote attacker to cause DoS condition or obtain potentially sensitive information on the target system.
The weakness exists due to boundary error. A remote attacker can send a specially crafted input, trick the victim into opening it, trigger memory corruption, gain access to potentially sensitive information and cause the service to crash.
The weakness exists due to boundary error. A remote attacker can send a specially crafted input, trick the victim into opening it, trigger memory corruption, gain access to potentially sensitive information and cause the service to crash.
How to mitigate CVE-2016-4743
Update to version 10.0.2.