CVE-2016-4472 in Apple iTunesinfo

Summary

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

Reservation

05/02/2016

Disclosure

06/30/2016

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
99040Apple iTunes Expat memory corruption119Not definedOfficial fixCVE-2016-4472
88546expat Overflow Protection memory corruption119Not definedOfficial fixCVE-2016-4472

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!