MEDIUM6.8
Уязвимость браузера Safari и операционной системы iOS, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P
ALT-PU-2016-1045-1Package update libwebkitgtk4 in branch sisyphus
Severity:
Closed issues (11)
MEDIUM6.8
Уязвимость браузера Safari и операционной системы iOS, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCRITICAL9.3
Уязвимость браузера Safari и операционной системы iOS, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCRITICAL9.3
Уязвимость браузера Safari и операционной системы iOS, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCRITICAL9.3
Уязвимость браузера Safari и операционной системы iOS, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CMEDIUM6.8
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://www.securityfocus.com/bid/78720
- http://www.securitytracker.com/id/1034341
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205635
- https://support.apple.com/HT205639
- https://support.apple.com/HT205640
- https://support.apple.com/kb/HT205636
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://www.securityfocus.com/bid/78720
- http://www.securitytracker.com/id/1034341
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205635
- https://support.apple.com/HT205639
- https://support.apple.com/HT205640
- https://support.apple.com/kb/HT205636
MEDIUM6.8
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PReferences
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://www.securityfocus.com/bid/78720
- http://www.securitytracker.com/id/1034341
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205635
- https://support.apple.com/HT205639
- https://support.apple.com/HT205640
- https://support.apple.com/kb/HT205636
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
- http://www.securityfocus.com/bid/78720
- http://www.securitytracker.com/id/1034341
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205635
- https://support.apple.com/HT205639
- https://support.apple.com/HT205640
- https://support.apple.com/kb/HT205636
HIGH8.8
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1727.
CVSS 2.0MEDIUM 6.8
CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:PCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html
- http://www.securityfocus.com/archive/1/537771/100/0/threaded
- http://www.securityfocus.com/bid/81263
- http://www.securitytracker.com/id/1034737
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205729
- https://support.apple.com/HT205730
- https://support.apple.com/HT205732
- https://support.apple.com/HT206168
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html
- http://www.securityfocus.com/archive/1/537771/100/0/threaded
- http://www.securityfocus.com/bid/81263
- http://www.securitytracker.com/id/1034737
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205729
- https://support.apple.com/HT205730
- https://support.apple.com/HT205732
- https://support.apple.com/HT206168
HIGH8.8
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1724.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html
- http://www.securityfocus.com/archive/1/537771/100/0/threaded
- http://www.securityfocus.com/bid/81263
- http://www.securitytracker.com/id/1034737
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205729
- https://support.apple.com/HT205730
- https://support.apple.com/HT205732
- https://support.apple.com/HT206168
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
- http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html
- http://www.securityfocus.com/archive/1/537771/100/0/threaded
- http://www.securityfocus.com/bid/81263
- http://www.securitytracker.com/id/1034737
- https://security.gentoo.org/glsa/201706-15
- https://support.apple.com/HT205729
- https://support.apple.com/HT205730
- https://support.apple.com/HT205732
- https://support.apple.com/HT206168
HIGH8.8
WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CCVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HReferences
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html
- http://www.securityfocus.com/archive/1/537948/100/0/threaded
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT206166
- https://support.apple.com/HT206169
- https://support.apple.com/HT206171
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html
- http://www.securityfocus.com/archive/1/537948/100/0/threaded
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT206166
- https://support.apple.com/HT206169
- https://support.apple.com/HT206171
MEDIUM6.5
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.
CVSS 2.0HIGH 7.1
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:CCVSS 3.xMEDIUM 6.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HReferences
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
- http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html
- http://www.securityfocus.com/archive/1/539295/100/0/threaded
- http://www.securityfocus.com/bid/91830
- http://www.securitytracker.com/id/1036343
- https://support.apple.com/HT206900
- https://support.apple.com/HT206902
- https://support.apple.com/HT206905
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
- http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html
- http://www.securityfocus.com/archive/1/539295/100/0/threaded
- http://www.securityfocus.com/bid/91830
- http://www.securitytracker.com/id/1036343
- https://support.apple.com/HT206900
- https://support.apple.com/HT206902
- https://support.apple.com/HT206905