PT-2017-13167 · Apple · Ios

Nicolas Devillard · Publicado 2017-12-25 · Atualizado 2019-10-03 · CVE-2017-13874

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.2

Description The issue involves the Mail component and might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection.

Recommendations For iOS versions prior to 11.2, update to version 11.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-13874

Produtos afetados

Ios

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-13874 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-13874 · Aviso do Fabricante
• https://support.apple.com/HT208334 · Aviso do Fabricante
• http://securityfocus.com/bid/102097 · Nota
• http://securitytracker.com/id/1039953 · Nota