CVE-2016-1725
CVE-2016-1725
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1726.
CVSS 8.8 · High · EPSS 4.4%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
qtwebkit-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2+dfsg-1ubuntu2.1
- 5.5.1+dfsg-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-source Ubuntu:16.04:LTS
- Versions
- 2.3.2-0ubuntu10
- 2.3.2-0ubuntu11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkitgtk Ubuntu:16.04:LTS
- Versions
- 2.4.9-2ubuntu2
- 2.4.10-0ubuntu1
- 2.4.11-0ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html
- http://www.securityfocus.com/bid/81263
- https://support.apple.com/HT206168
- http://www.securityfocus.com/archive/1/537771/100/0/threaded
- http://www.securitytracker.com/id/1034737
- https://support.apple.com/HT205730
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205732
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-1725