Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
suse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/92053 - http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html - https://codereview.chromium.org/2086333003 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html - https://crbug.com/622183 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://www.securitytracker.com/id/1036428 - http://www.debian.org/security/2016/dsa-3637
CVE ID: CVE-2016-1708 State: PUBLISHED Published: 2016-07-23T19:00:00 Last Updated: 2024-08-05T23:02:13.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2
s.opensuse.org/opensuse-security-announce/2016-07/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/92053 - http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html - https://crbug.com/613949 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html - https://codereview.chromium.org/2103663002 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-1485.html - http://www.securitytracker.com/id/1036428 - http://www.debian.org/security/2016/dsa-3637
CVE ID: CVE-2016-1709 State: PUBLISHED Published: 2016-07-23T19:00:00 Last Updated: 2024-08-05T23:02:13.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/
21.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/92053 - https://github.com/googlei18n/sfntly/commit/468cad540fa1b0027cad60456f53feabecdce2bc - http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html - https://github.com/googlei18n/sfntly/pull/56 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html - https://github.com/googlei18n/sfntly/commit/c56b85408bab232efd7e650f0994272a174e3b92 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-1485.html - http://www.securitytracker.com/id/1036428 - https://crbug.com/614934
http://rhn.redhat.com/errata/RHSA-2016-1485.html - http://www.securitytracker.com/id/1036428 - https://crbug.com/614934 - http://www.debian.org/security/2016/dsa-3637
CVE ID: CVE-2016-1710 State: PUBLISHED Published: 2016-07-23T19:00:00 Last Updated: 2024-08-05T23:02:13.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid
021.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/92053 - http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html - http://www.ubuntu.com/usn/USN-3041-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html - https://codereview.chromium.org/2035973002/ - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-1485.html - https://crbug.com/616907 - http://www.securitytracker.com/id/1036428 - http://www.debian.org/security/2016/dsa-3637
CVE ID: CVE-2016-1711 State: PUBLISHED Published: 2016-07-23T19:00:00 Last Updated: 2024-08-05T23:02:13.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html - https://codereview.chromium.org/2079473002 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.ht
- https://codereview.chromium.org/2079473002 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/92053 - http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html - http://www.ubuntu.com/usn/USN-3041-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html - https://crbug.com/617495 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-1485.html - http://www.securitytracker.com/id/1036428 - http://www.debian.org/security/2016/dsa-3637
CVE ID: CVE-2016-1712 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-05T23:02:13.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036326 - https://security.paloaltonetworks.com/CVE-2016-1712
CVE ID: CVE-2016-1713 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T23:02:12.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in test/logo/. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6000. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/l
mplete fix for CVE-2015-6000. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/12/7 - http://www.openwall.com/lists/oss-security/2016/01/12/4 - http://b.fl7.de/2016/01/vtiger-crm-6.4-auth-rce.html - https://www.exploit-db.com/exploits/44379/
CVE ID: CVE-2016-1714 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-05T23:02:12.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/12/10 - http://rhn
lyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/12/10 - http://rhn.redhat.com/errata/RHSA-2016-0083.html - http://rhn.redhat.com/errata/RHSA-2016-0085.html - http://rhn.redhat.com/errata/RHSA-2016-0086.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.openwall.com/lists/oss-security/2016/01/12/11 - http://www.openwall.com/lists/oss-security/2016/01/11/7 - http://www.securitytracker.com/id/1034858 - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00428.html - http://rhn.redhat.com/errata/RHSA-2016-0081.html - http://www.securityfocus.com/bid/80250 - https://security.gentoo.org/
http://rhn.redhat.com/errata/RHSA-2016-0081.html - http://www.securityfocus.com/bid/80250 - https://security.gentoo.org/glsa/201604-01 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - http://rhn.redhat.com/errata/RHSA-2016-0082.html - http://rhn.redhat.com/errata/RHSA-2016-0087.html - http://rhn.redhat.com/errata/RHSA-2016-0084.html - http://www.debian.org/security/2016/dsa-3471 - http://rhn.redhat.com/errata/RHSA-2016-0088.html
CVE ID: CVE-2016-1715 State: PUBLISHED Published: 2016-01-12T20:00:00Z Last Updated: 2024-09-17T00:41:33.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service (memory corruption and system crash) or gain privileges via a 768 syscall, which triggers a zero to be written to an arbitrary kernel memory location. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id
. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10145 - http://www.zerodayinitiative.com/advisories/ZDI-16-007
CVE ID: CVE-2016-1716 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205731 - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html
CVE ID: CVE-2016-1717 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206168 - https://support.apple.com/HT205731 - https://support.apple.com/HT205729 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archiv
ves/security-announce/2016/Jan/msg00005.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://support.apple.com/HT205732
CVE ID: CVE-2016-1718 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205731 - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html - http://zerodayinitiative.com/advisories/ZDI-16-020/
CVE ID: CVE-2016-1719 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39362/ - http://packetstormsecurity.com/files/135442/iOS-Kernel-AppleOscarAccelerometer-Use-After-Free.html - https://www.exploit-db.com/exploits/39360/ - https://code.google.com/p/google-security-research/issues/detail?id=604 -
https://www.exploit-db.com/exploits/39360/ - https://code.google.com/p/google-security-research/issues/detail?id=604 - https://support.apple.com/HT206168 - https://support.apple.com/HT205731 - https://support.apple.com/HT205729 - http://packetstormsecurity.com/files/135441/iOS-Kernel-AppleOscarCompass-Use-After-Free.html - http://packetstormsecurity.com/files/135439/iOS-Kernel-IOHIDEventService-Use-After-Free.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html - https://code.google.com/p/google-security-research/issues/detail?id=607 - http://list
-announce/2016/Jan/msg00003.html - https://code.google.com/p/google-security-research/issues/detail?id=607 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://packetstormsecurity.com/files/135438/iOS-Kernel-IOReportHub-Use-After-Free.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://www.exploit-db.com/exploits/39363/ - http://packetstormsecurity.com/files/135440/iOS-Kernel-AppleOscarCMA-Use-After-Free.html - https://code.google.com/p/google-security-research/issues/detail?id=605 - https://code.google.com/p/google-security-research/issues/detail?id=603 - http://packetstormsecurity.com/files/135443/iOS-Kernel-AppleOscarGyr
m/p/google-security-research/issues/detail?id=603 - http://packetstormsecurity.com/files/135443/iOS-Kernel-AppleOscarGyro-Use-After-Free.html - https://www.exploit-db.com/exploits/39359/ - https://www.exploit-db.com/exploits/39361/ - https://support.apple.com/HT205732 - https://www.exploit-db.com/exploits/39364/ - https://code.google.com/p/google-security-research/issues/detail?id=606 - https://code.google.com/p/google-security-research/issues/detail?id=608
CVE ID: CVE-2016-1720 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206168 - https://support.apple.com/HT205731 - http://packetstormsecurity.com/files/135435/IOKit-Methods-Being-Called-Without-Locks-From-IOServiceClose.html - https://support.apple.com/HT205729 - https://www.exploit-db.com/exploits/39367/ - https://cod
From-IOServiceClose.html - https://support.apple.com/HT205729 - https://www.exploit-db.com/exploits/39367/ - https://code.google.com/p/google-security-research/issues/detail?id=597 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://support.apple.com/HT205732
CVE ID: CVE-2016-1721 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206168 - https://support.apple.com/HT205731 - https://support.apple.com/HT205729 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html - http://packetstormsecurity.com/files/135444/iOS-OS-X-Kernel-Uninitialized-Variable-Code-
nounce/2016/Jan/msg00005.html - http://packetstormsecurity.com/files/135444/iOS-OS-X-Kernel-Uninitialized-Variable-Code-Execution.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://www.exploit-db.com/exploits/39358/ - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://code.google.com/p/google-security-research/issues/detail?id=618 - https://support.apple.com/HT205732
CVE ID: CVE-2016-1722 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206168 - https://support.apple.com/HT205731 - https://support.apple.com/HT205729 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announc
ce/2016/Jan/msg00005.html - http://www.securitytracker.com/id/1034736 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://support.apple.com/HT205732
CVE ID: CVE-2016-1723 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive/1
l - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive/1/537771/100/0/threaded - http://www.securitytracker.com/id/1034737 - https://support.apple.com/HT205730 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT205732 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
CVE ID: CVE-2016-1724 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1727. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive
tml - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive/1/537771/100/0/threaded - https://support.apple.com/HT205729 - http://www.securitytracker.com/id/1034737 - https://support.apple.com/HT205730 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT205732 - http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html
CVE ID: CVE-2016-1725 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1726. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive/1
CVE ID: CVE-2016-1726 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1725. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive/1
CVE ID: CVE-2016-1727 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1724. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html - http://www.securityfocus.com/bid/81263 - https://support.apple.com/HT206168 - http://www.securityfocus.com/archive
CVE ID: CVE-2016-1728 State: PUBLISHED Published: 2016-02-01T11:00:00 Last Updated: 2024-08-05T23:02:13.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html - http://www.securityfocus.com/bid/81263 - http://www.securityfocus.com/archive/1/537771/1