An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.
References
Link | Resource |
---|---|
https://support.apple.com/HT207617 | Vendor Advisory |
https://support.apple.com/HT207602 | Vendor Advisory |
https://support.apple.com/HT207600 | Vendor Advisory |
http://www.securityfocus.com/bid/97133 | Third Party Advisory VDB Entry |
https://bugs.chromium.org/p/project-zero/issues/detail?id=1105 | |
https://security.gentoo.org/glsa/201706-15 | |
http://www.securitytracker.com/id/1038137 | |
https://www.exploit-db.com/exploits/41813/ |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-04-01 18:59
Updated : 2017-08-15 18:29
NVD link : CVE-2017-2471
Mitre link : CVE-2017-2471
JSON object : View
CWE
CWE-416
Use After Free
Products Affected
apple
- watchos
- iphone_os
- safari