CVE-2016-4591: High severity Apple WebKit vulnerability
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.12.5-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4591?
The severity of CVE-2016-4591 is classified as high due to its potential for remote filesystem access.
How do I fix CVE-2016-4591?
To fix CVE-2016-4591, update WebKit, Safari, and iOS to the latest versions provided by Apple.
Which systems are affected by CVE-2016-4591?
CVE-2016-4591 affects WebKit in Apple iOS versions before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2.
What type of attack does CVE-2016-4591 enable?
CVE-2016-4591 enables remote attackers to access the local filesystem through unspecified vectors.
When was CVE-2016-4591 disclosed?
CVE-2016-4591 was disclosed in July 2016 as part of Apple's security announcements.