CVE-2016-7589

Description

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the WebKit component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.69

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Apple iTunes For Mac 12.5.3Mac
Multiple Vulnerabilities are affected in Apple Safari 10.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 10.0.1Mac
JavaScript engine library from WebKitGTK+ - GObject introspection (USN-3166-1) libwebkit2gtk-4.0-37_2.14.3-0ubuntu0.16.04.1_i386.debLinux
Web content engine library for GTK+ (USN-3191-1) libwebkit2gtk-4.0-37_2.14.3-0ubuntu0.16.04.1_i386.debLinux
Web content engine library for GTK+ (USN-3191-1) libwebkit2gtk-4.0-37_2.14.3-0ubuntu0.16.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-3191-1) libjavascriptcoregtk-4.0-18_2.14.3-0ubuntu0.16.04.1_i386.debLinux
Web content engine library for GTK+ (USN-3191-1) libjavascriptcoregtk-4.0-18_2.14.3-0ubuntu0.16.04.1_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234