First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "AppleMobileFileIntegrity" component, which allows remote attackers to spoof signed code by using a matching team ID.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iStyle @cosme iPhone OS | <=10.0.3 | |
Apple iOS and macOS | <=10.12.0 | |
tvOS | <=10.0 | |
Apple iOS, iPadOS, and watchOS | <=2.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-7584 has been classified as a medium severity vulnerability.
To resolve CVE-2016-7584, users should update their affected Apple devices to the latest supported versions of iOS, macOS, tvOS, or watchOS.
CVE-2016-7584 affects the AppleMobileFileIntegrity component in iOS, macOS, tvOS, and watchOS.
CVE-2016-7584 affects iOS versions before 10.1, macOS before 10.12.1, tvOS before 10.0.1, and watchOS before 3.1.
Exploiting CVE-2016-7584 allows attackers to spoof signed code, potentially compromising the integrity of the system.