CVEvulnerability

CVE-2017-2391

5.3 MEDIUM Published 2017-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-326

Description

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.

Affected configurations

• apple keynote (<= 7.0.5) • apple numbers (<= 4.0.5) • apple pages (<= 6.0.5) • apple keynote (<= 3.0.5) • apple numbers (<= 3.0.5) • apple pages (<= 3.0.5)

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References