Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support.

VectorNETWORK

PublishedSep 25, 2016, 10:59

Published Byproduct-security@apple.com

Base Score

Score6.5

Affected Versions

No affected versions found.

References

http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html
http://www.securityfocus.com/bid/93066
http://www.securitytracker.com/id/1036854
https://support.apple.com/HT207143
https://support.apple.com/HT207157
https://support.apple.com/HT207158

Weakness Type

CWE-284

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK