Medium severity · published Feb 20, 2017
CVE-2016-4613
An issue was discovered in certain Apple products
6.5
CVSS
1.1%
EPSS
No
On KEV
Description
An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AT
Apple TV · Apple
10.0.0 · source: NVD
IC
Icloud · Apple
through 6.0.0 · source: NVD
IT
Itunes · Apple
through 12.5.1 · source: NVD
SA
Safari · Apple
through 10.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4613
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4613
www.securityfocus.com
http://www.securityfocus.com/bid/93949
www.securitytracker.com
http://www.securitytracker.com/id/1037139
support.apple.com
https://support.apple.com/HT207270
support.apple.com
https://support.apple.com/HT207272
support.apple.com
https://support.apple.com/HT207273
support.apple.com
https://support.apple.com/HT207274
More from Apple TV
9.8
CVE-2018-4189
In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a…
9.8
CVE-2018-4298
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management
8.8
CVE-2018-4096
An issue was discovered in certain Apple products
8.8
CVE-2018-4089
An issue was discovered in certain Apple products
8.8
CVE-2018-4088
An issue was discovered in certain Apple products