CVE-2016-4591 in tvOS

Summary

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

Reservation

05/11/2016

Disclosure

07/21/2016

Moderation

VulDB entry created

Entries

3

CPE

ready

CWE

CWE-284

CVSS

7.5

EPSS

0.02713

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-4591
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-4591
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-4591/