CVE-2016-4607

Summary

CVE	CVE-2016-4607
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2016-07-22 02:59:00 UTC
Updated	2023-11-07 02:32:00 UTC
Description	libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.

Risk And Classification

Problem Types: CWE-119

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Apple	Icloud	All	All	All	All
Application	Apple	Icloud	All	All	All	All
Operating System	Apple	Iphone Os	All	All	All	All
Operating System	Apple	Iphone Os	All	All	All	All
Application	Apple	Itunes	All	All	All	All
Application	Apple	Itunes	All	All	All	All
Operating System	Apple	Mac Os X	All	All	All	All
Operating System	Apple	Mac Os X	All	All	All	All
Operating System	Apple	Tvos	All	All	All	All
Operating System	Apple	Tvos	All	All	All	All
Operating System	Apple	Watchos	All	All	All	All
Operating System	Apple	Watchos	All	All	All	All
Operating System	Fedoraproject	Fedora	30	All	All	All
Operating System	Fedoraproject	Fedora	30	All	All	All
Operating System	Microsoft	Windows	-	All	All	All
Operating System	Microsoft	Windows	-	All	All	All
Application	Xmlsoft	Libxslt	All	All	All	All
Application	Xmlsoft	Libxslt	All	All	All	All

References

Reference	Source	Link	Tags
About the security content of iCloud for Windows 5.2.1 - Apple Support	CONFIRM	support.apple.com	Vendor Advisory
About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 - Apple Support	CONFIRM	support.apple.com	Vendor Advisory
Apple Mac OS X/watchOS/iOS/tvOS Multiple Security Vulnerabilities	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
Apple macOS/OS X Multiple Flaws Let Remote and Local Users Deny Service, Obtain Potentially Sensitive Information, and Execute Arbitrary Code - SecurityTracker	SECTRACK	www.securitytracker.com	Third Party Advisory, VDB Entry
[SECURITY] Fedora 30 Update: mingw-libxslt-1.1.33-1.fc30 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org	Third Party Advisory
APPLE-SA-2016-07-18-1 OS X El Capitan v10.11.6 and Security Update 2016-004	APPLE	lists.apple.com	Mailing List, Vendor Advisory
APPLE-SA-2016-07-18-6 iTunes 12.4.2	APPLE	lists.apple.com	Mailing List, Vendor Advisory
About the security content of watchOS 2.2.2 - Apple Support	CONFIRM	support.apple.com	Vendor Advisory
About the security content of iOS 9.3.3 - Apple Support	CONFIRM	support.apple.com	Vendor Advisory
[SECURITY] Fedora 30 Update: mingw-libxslt-1.1.33-1.fc30 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
APPLE-SA-2016-07-18-3 watchOS 2.2.2	APPLE	lists.apple.com	Mailing List, Vendor Advisory
About the security content of iTunes 12.4.2 for Windows - Apple Support	CONFIRM	support.apple.com	Vendor Advisory
APPLE-SA-2016-07-18-4 tvOS 9.2.2	APPLE	lists.apple.com	Mailing List, Vendor Advisory
APPLE-SA-2016-07-18-2 iOS 9.3.3	APPLE	lists.apple.com	Mailing List, Vendor Advisory
About the security content of tvOS 9.2.2 - Apple Support	CONFIRM	support.apple.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

900009 CBL-Mariner Linux Security Update for libxslt 1.1.34