CVE-2016-4661
MEDIUMApple Mac OS X < 10.12.0 - Improper Input Validation
Title source: ruleDescription
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ntfs" component, which misparses disk images and allows attackers to cause a denial of service via a crafted app.
Scores
CVSS v3
5.5
EPSS
0.0016
EPSS Percentile
37.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-20
Status
published
Affected Products (2)
apple/mac_os_x
< 10.12.0
n/a/n/a
Timeline
Published
Feb 20, 2017
Tracked Since
Feb 18, 2026