CVE-2016-7661

high

Description

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "Power Management" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.

References

http://www.securityfocus.com/bid/94906

http://www.securitytracker.com/id/1037469

https://support.apple.com/HT207422

https://support.apple.com/HT207423

https://www.exploit-db.com/exploits/40931/

https://www.exploit-db.com/exploits/40958/

Details

Source: MITRE

Published: 2017-02-20

Updated: 2017-09-03

Type: CWE-264

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH