cpe:/o:apple:apple_tv:10.0.0 cpe:/o:apple:iphone_os:10.0.3 cpe:/o:apple:mac_os_x:10.12.0 cpe:/o:apple:watchos:2.2.2 CVE-2016-4660 2017-02-20T03:59:00.243-05:00 2018-10-30T12:27:24.123-04:00 5.8 NETWORK MEDIUM NONE PARTIAL NONE PARTIAL http://nvd.nist.gov 2017-02-21T09:56:50.450-05:00 SECTRACK 1037086 BID 93849 CONFIRM https://support.apple.com/HT207269 CONFIRM https://support.apple.com/HT207270 CONFIRM https://support.apple.com/HT207271 CONFIRM https://support.apple.com/HT207275 An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font.