CVE-2016-7589 in watchOS

Summary

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

09/09/2016

Disclosure

02/20/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
95911	Apple watchOS WebKit memory corruption	119	Not defined	Official fix	CVE-2016-7589
94336	Apple iCloud WebKit State memory corruption	119	Not defined	Official fix	CVE-2016-7589
94312	Apple Safari WebKit State memory corruption	119	Not defined	Official fix	CVE-2016-7589
94289	Apple tvOS WebKit memory corruption	119	Not defined	Official fix	CVE-2016-7589
94241	Apple iTunes WebKit memory corruption	119	Not defined	Official fix	CVE-2016-7589
94216	Apple iOS WebKit memory corruption	119	Not defined	Official fix	CVE-2016-7589

Sources

• MITRE
• NVD
• CVE Details