CVE-2016-6231

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://seclists.org/fulldisclosure/2016/Aug/30Third Party Advisory, VDB Entry
http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/539071/100/0/threaded
http://www.securityfocus.com/bid/92200
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716Third Party Advisory
http://seclists.org/fulldisclosure/2016/Aug/30Third Party Advisory, VDB Entry
http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/539071/100/0/threaded
http://www.securityfocus.com/bid/92200
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716Third Party Advisory

Timeline

Published: Aug 25, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-62327.5Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files vi CVE-2016-62339.8The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injec CVE-2016-62345.5The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (crash) via a cra CVE-2016-62355.5The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (segmentatio CVE-2016-62365.5The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-boun CVE-2016-62375.5The build_huffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bounds w CVE-2016-62385.5The write_ujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bounds read) CVE-2016-62395.5The mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service (kernel panic and crash) via a large s CVE-2016-62407.8Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileg CVE-2016-62417.8Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via CVE-2016-62425.5OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel panic) via a large ident value in a kevent CVE-2016-62435.5thrsleep in kern/kern_synch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a crafted value in t