Apple iBooks Author information leakage (CVE-2016-1789)

Apple iBooks Author information leakage (CVE-2016-1789)
Apple iBooks Author information leakage (CVE-2016-1789)

Release date:
Updated on:

Affected Systems:

Apple iBooks Author 2.4.1

Description:

CVE (CAN) ID: CVE-2016-1789

IBooks Author is an e-book editing and creation application.

IBooks Author has the XML external entity reference vulnerability in parsing malicious files, which can cause user information leakage.

<* Source: Behrouz Sadeghipour


Link: https://support.apple.com/en-us/HT206224
*>

Suggestion:

Vendor patch:

Apple
-----
Apple has released a Security Bulletin (HT206224) and corresponding patches for this:
HT206224: About the security content of iBooks Author 2.4.1
Link: https://support.apple.com/en-us/HT206224

Patch download: https://support.apple.com/kb/HT201222

This article permanently updates the link address: