CVE-2016-1798 : Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service

Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.

Published 2016-05-20 10:59:10

Updated 2016-12-01 03:06:21

Source Apple Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2016-1798

Apple » Mac Os X
Versions up to, including, (<=) 10.11.4
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
3.3	LOW	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

http://www.securitytracker.com/id/1035895

Apple OS X Multiple Flaws Let Remote Users Execute Arbitrary Code, Deny Service, and Gain Elevated Privileges and Let Local Users Obtain Potentially Sensitive Information and Gain Elevated Privileges

CVEs referencing this url
http://www.securityfocus.com/bid/90696

Apple Mac OS X APPLE-SA-2016-05-16-4 Multiple Security Vulnerabilities

CVEs referencing this url
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html

Apple - Lists.apple.com
Vendor Advisory

CVEs referencing this url
https://support.apple.com/HT206567

About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003 - Apple Support
Vendor Advisory

CVEs referencing this url

Jump to