CVE-2016-4760

MEDIO 6.5CVE-2016-4760 · Published 25/09/2016 · updated 17/06/2026

En resumen

CVE-2016-4760 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a itunes (apple), safari (apple).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 80.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
itunes apple	`≤ 12.4.3`	No fix yet
safari apple	`≤ 9.1.3`	No fix yet

Description

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support.

References

lists.apple.com/archives/security-announce/2016/Sep/msg00007.html · Mailing List
lists.apple.com/archives/security-announce/2016/Sep/msg00008.html · Mailing List
lists.apple.com/archives/security-announce/2016/Sep/msg00012.html · Mailing List
securityfocus.com/bid/93066
securitytracker.com/id/1036854
support.apple.com/HT207143 · Vendor Advisory
support.apple.com/HT207157 · Vendor Advisory
support.apple.com/HT207158 · Vendor Advisory

Más vulnerabilidades de itunes

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itunes

apple

≤ 12.4.3

No fix yet

safari

apple

≤ 9.1.3

No fix yet

Más vulnerabilidades de itunes

Ver todo →