CVEvulnerability
CVE-2017-7064
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-07-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
Affected configurations
• apple itunes (<= 12.6.1)
• apple safari (<= 10.1.1)
• apple iphone os (<= 10.3.2)
• apple icloud (<= 6.2.1)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/99890 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038950 Third Party Advisory, VDB Entry
- https://support.apple.com/HT207921 Vendor Advisory
- https://support.apple.com/HT207923 Vendor Advisory
- https://support.apple.com/HT207927 Vendor Advisory
- https://support.apple.com/HT207928 Vendor Advisory
- https://www.exploit-db.com/exploits/42375/ Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/99890 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038950 Third Party Advisory, VDB Entry
- https://support.apple.com/HT207921 Vendor Advisory
- https://support.apple.com/HT207923 Vendor Advisory
- https://support.apple.com/HT207927 Vendor Advisory
- https://support.apple.com/HT207928 Vendor Advisory
- https://www.exploit-db.com/exploits/42375/ Exploit, Third Party Advisory, VDB Entry