CVE-2017-7063

EPSS 1.24%
Published 20.07.2017 16:29:02
Last modified 20.04.2025 01:37:25
Source product-security@apple.com
Teams watchlist Login
Open Login

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. watchOS before 3.2.3 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service (memory consumption and application crash).

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ iPhone OS Version <= 10.3.2

Apple ≫ watchOS Version <= 3.2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.24%	0.774

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://www.securitytracker.com/id/1038950

Third Party Advisory

VDB Entry

https://support.apple.com/HT207923

Vendor Advisory

https://support.apple.com/HT207925

Vendor Advisory

http://www.securityfocus.com/bid/99881

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-7063

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-7063

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-7063

EUVD