WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1724.

The remote host is affected by the vulnerability described in GLSA-201706-15 (WebKitGTK+: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebKitGTK+. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attack can use multiple vectors to execute arbitrary code or       cause a denial of service condition.
  Workaround :

    There is no known workaround at this time.

Versions of Apple TV earlier than 9.1.1 are unpatched for vulnerabilities in the following components :

 - Disk Images (CVE-2016-1717)
 - IOHIDFamily (CVE-2016-1719)
 - IOKit (CVE-2016-1720)
 - Kernel (CVE-2016-1721)
 - libxslt (CVE-2015-7995)
 - syslog (CVE-2016-1722)
 - WebKit (CVE-2016-1724, CVE-2016-1727)

The remote host is running a version of iOS that is prior to version 9.2.1 and the following components contain vulnerabilities :

 - Disk Images
 - IOHIDFamily
 - IOKit
 - Kernel
 - libxslt
 - syslog
 - WebKit
 - WebKit CSS
 - WebSheet

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.0.3. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption vulnerabilities exist in     WebKit due to improper validation of user-supplied     input. A remote attacker, via a specially crafted     website, can exploit these issues to execute arbitrary     code or cause a denial of service. (CVE-2016-1723,     CVE-2016-1724, CVE-2016-1725, CVE-2016-1726,     CVE-2016-1727)

  - A flaw exists in the Cascading Style Sheets (CSS)     implementation in WebKit CSS when handling the     'a:visited button' CSS selector while evaluating the     height of the containing element. A remote attacker     can exploit this, via a crafted website, to obtain     sensitive browser history information. (CVE-2016-1728)

According to its banner, the remote Apple TV device is a version prior to 9.1.1. It is, therefore, affected by the following vulnerabilities :

  - A type confusion error exists in the bundled libxslt     library due to improper handling of invalid values. An     attacker can exploit this to crash the application,     resulting in a denial of service condition.
    (CVE-2015-7995)

  - A memory corruption issue exists due to improper     validation of user-supplied input when handling disk     images. A local attacker can exploit this to cause a     denial of service condition or the execution of     arbitrary code. (CVE-2016-1717)

  - A use-after-free error exists in the IOHIDFamily API     due to improper validation of user-supplied input. A     local attacker can exploit this to dereference already     freed memory, resulting in a denial of service condition     or the execution of arbitrary code. (CVE-2016-1719)

  - A memory corruption issue exists in IOKit due to     improper validation of user-supplied input. A local     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1720)

  - A memory corruption issue exists in the Kernel due to     improper validation of user-supplied input. A local     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1721)

  - An overflow condition exists in the     add_lockdown_session() function due to improper     validation of user-supplied input. A local attacker can     exploit this to cause a heap-based buffer overflow,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2016-1722)

  - Multiple memory corruption issues exist in WebKit due to     improper validation of user-supplied input. A remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1724, CVE-2016-1727)

The mobile device is running a version of iOS prior to 9.2.1. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Disk Images
  - IOHIDFamily
  - IOKit
  - Kernel
  - libxslt
  - syslog
  - WebKit
  - WebKit CSS
  - WebSheet

ID	Name	Product	Family	Severity
100675	GLSA-201706-15 : WebKitGTK+: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
9335	Apple TV < 9.1.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	high
9330	Apple iOS < 9.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
88597	Mac OS X : Apple Safari < 9.0.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
88418	Apple TV < 9.1.1 Multiple Vulnerabilities	Nessus	Misc.	high
88050	Apple iOS < 9.2.1 Multiple Vulnerabilities	Nessus	Mobile Devices	high

Detections

Analytics

CVE-2016-1727

high

Tenable Plugins

high

high

high

high

high

high