CVE Catalog

CVE-2016-4610

Critical
Published: Translated: NVD NIST

Summary

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 has a vulnerability that allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Risk Assessment

Organizations may be exposed to attacks that lead to system crashes or other unforeseen consequences, potentially affecting service availability.

Recommendation

It is recommended to update to the latest versions of systems and applications to minimize the risk associated with this vulnerability.

Original NVD description (English source)

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS