CVEvulnerability
CVE-2017-2508
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with container nodes.
Affected configurations
• apple safari (<= 10.1)
• apple iphone os (<= 10.3.1)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/98474 www.securityfocus.com
- http://www.securitytracker.com/id/1038487 www.securitytracker.com
- https://security.gentoo.org/glsa/201706-15 security.gentoo.org
- https://support.apple.com/HT207798 Vendor Advisory
- https://support.apple.com/HT207804 Vendor Advisory
- https://www.exploit-db.com/exploits/42066/ www.exploit-db.com
- http://www.securityfocus.com/bid/98474 www.securityfocus.com
- http://www.securitytracker.com/id/1038487 www.securitytracker.com
- https://security.gentoo.org/glsa/201706-15 security.gentoo.org
- https://support.apple.com/HT207798 Vendor Advisory
- https://support.apple.com/HT207804 Vendor Advisory
- https://www.exploit-db.com/exploits/42066/ www.exploit-db.com