CVE-2016-1858

보통 6.5CVE-2016-1858 · Published 20/05/2016 · updated 17/06/2026

요약

CVE-2016-1858은(는) safari (apple), webkitgtk+ (webkitgtk)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 2.2%, 전체 취약점의 82.3%보다 높음.
조치: 9.1.1, 2.12.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
safari apple	`< 9.1.1`	`9.1.1`
webkitgtk+ webkitgtk	`< 2.12.0`	`2.12.0`

Description

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.

References

lists.apple.com/archives/security-announce/2016/May/msg00001.html · Mailing List
lists.apple.com/archives/security-announce/2016/May/msg00002.html · Mailing List
lists.apple.com/archives/security-announce/2016/May/msg00005.html · Mailing List
packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html · Third Party Advisory
securityfocus.com/archive/1/538522/100/0/threaded · Third Party Advisory
securitytracker.com/id/1035888 · Third Party Advisory
support.apple.com/HT206564 · Vendor Advisory
support.apple.com/HT206565 · Vendor Advisory
support.apple.com/HT206568 · Vendor Advisory

safari의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 9.1.1

9.1.1

webkitgtk+

webkitgtk

< 2.12.0

2.12.0

safari의 다른 취약점

모두 보기 →