CVEvulnerability
CVE-2017-7152
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-12-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site.
Affected configurations
• apple iphone os (< 11.2)
References
- http://seclists.org/fulldisclosure/2019/Oct/49 seclists.org
- http://seclists.org/fulldisclosure/2019/Oct/54 seclists.org
- http://seclists.org/fulldisclosure/2019/Oct/56 seclists.org
- https://support.apple.com/HT208334 Vendor Advisory
- https://support.apple.com/kb/HT210721 support.apple.com
- https://support.apple.com/kb/HT210722 support.apple.com
- https://support.apple.com/kb/HT210724 support.apple.com
- http://seclists.org/fulldisclosure/2019/Oct/49 seclists.org
- http://seclists.org/fulldisclosure/2019/Oct/54 seclists.org
- http://seclists.org/fulldisclosure/2019/Oct/56 seclists.org
- https://support.apple.com/HT208334 Vendor Advisory
- https://support.apple.com/kb/HT210721 support.apple.com
- https://support.apple.com/kb/HT210722 support.apple.com
- https://support.apple.com/kb/HT210724 support.apple.com