CVE-2017-2391

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.

CVSS v3.0 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3.0 : MEDIUM

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://support.apple.com/HT207595	Vendor Advisory
http://www.securityfocus.com/bid/97126	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038136
http://www.securitytracker.com/id/1038135
http://www.securitytracker.com/id/1038134

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:keynote::::::mac_os_x::*
	cpe:2.3:a:apple:numbers::::::mac_os_x::*
	cpe:2.3:a:apple:pages::::::mac_os_x::*

Configuration 2 (hide)

OR	cpe:2.3:a:apple:keynote::::::iphone_os::*
	cpe:2.3:a:apple:numbers::::::iphone_os::*
	cpe:2.3:a:apple:pages::::::iphone_os::*

Information

Published : 2017-04-01 18:59

Updated : 2017-07-11 18:29

NVD link : CVE-2017-2391

Mitre link : CVE-2017-2391

JSON object : View

CWE

CWE-326

Inadequate Encryption Strength

Advertisement

Products Affected

apple

keynote
pages
numbers

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://support.apple.com/HT207595", "name": "https://support.apple.com/HT207595", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/97126", "name": "97126", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id/1038136", "name": "1038136", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securitytracker.com/id/1038135", "name": "1038135", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securitytracker.com/id/1038134", "name": "1038134", "tags": [], "refsource": "SECTRACK"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the \"Export\" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-326"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2017-2391", "ASSIGNER": "product-security@apple.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}}, "publishedDate": "2017-04-02T01:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:apple:keynote:*:*:*:*:*:mac_os_x:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "7.0.5"}, {"cpe23Uri": "cpe:2.3:a:apple:numbers:*:*:*:*:*:mac_os_x:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "4.0.5"}, {"cpe23Uri": "cpe:2.3:a:apple:pages:*:*:*:*:*:mac_os_x:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.0.5"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:apple:keynote:*:*:*:*:*:iphone_os:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.0.5"}, {"cpe23Uri": "cpe:2.3:a:apple:numbers:*:*:*:*:*:iphone_os:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.0.5"}, {"cpe23Uri": "cpe:2.3:a:apple:pages:*:*:*:*:*:iphone_os:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.0.5"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-12T01:29Z"}