CVE-2016-4689: High severity apple iPhone OS vulnerability
Published Feb 20, 2017
·Updated
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Mail" component, which does not alert the user to an S/MIME email signature that used a revoked certificate.
Affected Software
1 affected component
apple iPhone OS<=10.1.1
Event History
Feb 20, 2017
CVE Published
via MITRE·08:35 AM
Data Sourced
via MITRE·08:35 AM
Description
Data Sourced
via NVD·08:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-4689?
CVE-2016-4689 is a medium severity vulnerability in iOS that affects the Mail component.
2
How do I fix CVE-2016-4689?
To fix CVE-2016-4689, update your iOS device to version 10.2 or later.
3
Which versions of iOS are affected by CVE-2016-4689?
CVE-2016-4689 affects iOS versions prior to 10.2.
4
What is the impact of CVE-2016-4689?
The impact of CVE-2016-4689 is that users are not alerted when receiving an S/MIME email using a revoked certificate.
5
Is my Apple device vulnerable to CVE-2016-4689?
If your Apple device is running iOS version 10.1.1 or earlier, it is vulnerable to CVE-2016-4689.