5.5

CVE-2017-7064

Exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iTunes Version <= 12.6.1
   Microsoft ≫ Windows Version-
Apple ≫ Safari Version <= 10.1.1
Apple ≫ iPhone OS Version <= 10.3.2
Apple ≫ iCloud Version <= 6.2.1
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.12% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1038950
Third Party Advisory
VDB Entry
https://support.apple.com/HT207923
Vendor Advisory
https://support.apple.com/HT207921
Vendor Advisory
https://support.apple.com/HT207927
Vendor Advisory
https://support.apple.com/HT207928
Vendor Advisory
http://www.securityfocus.com/bid/99890
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42375/
Third Party Advisory
Exploit
VDB Entry