First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iOS | <=10.1.1 | |
Apple Mobile Safari | <=10.0.1 | |
Apple iCloud for Windows | <=6.0.1 | |
Apple iTunes for Windows | <=12.5.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-7656 is classified as a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2016-7656, you should update affected products to the latest versions provided by Apple.
CVE-2016-7656 affects iOS versions prior to 10.2, Safari versions prior to 10.0.2, iCloud versions prior to 6.1, and iTunes versions prior to 12.5.4.
CVE-2016-7656 involves the WebKit component used by Apple's software.
CVE-2016-7656 can facilitate remote attackers to execute arbitrary code or cause a denial of service.