CVE-2016-1859 | BDVDB-2026-76066 Detail
Description#
The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.zerodayinitiative.com/advisories/ZDI-16-352
- http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
- http://www.securitytracker.com/id/1035888
- http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html
- https://support.apple.com/HT206564
- http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
- https://support.apple.com/HT206565
- http://www.securityfocus.com/archive/1/538522/100/0/threaded
- https://support.apple.com/HT206568
- http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.