First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iOS | <=10.1.1 | |
Apple Mobile Safari | <=10.0.1 | |
Apple iCloud for Windows | <=6.0.1 | |
Apple iTunes for Windows | <=12.5.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4692 has a critical severity as it allows remote attackers to execute arbitrary code.
To fix CVE-2016-4692, update your affected Apple software to the latest versions or patches.
CVE-2016-4692 affects iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4.
The impact of CVE-2016-4692 includes potential remote code execution and possible denial of service.
There are no effective workarounds for CVE-2016-4692, so updating to a fixed version is necessary.