PT-2017-15390 · Apple+3 · Tvos+7

Lokihardt

·

Publicado

2017-02-11

·

Atualizado

2025-09-29

·

CVE-2017-2363

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Safari versions prior to 10.0.3 tvOS versions prior to 10.1.1 watchOS versions prior to 3.1.3
Description The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy, obtaining sensitive information via a crafted web site.
Recommendations For iOS versions prior to 10.2.1, update to version 10.2.1 or later. For Safari versions prior to 10.0.3, update to version 10.0.3 or later. For tvOS versions prior to 10.1.1, update to version 10.1.1 or later. For watchOS versions prior to 3.1.3, update to version 3.1.3 or later.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALSA-2025_16880
ALT-PU-2017-1154
ALT-PU-2017-1662
CVE-2017-2363
MGASA-2017-0069
OPENSUSE-SU-2017_2991-1
OPENSUSE-SU-2018_0326-1
SUSE-SU-2017:2933-1
SUSE-SU-2017_2933-1
SUSE-SU-2018:0219-1
USN-3200-1

Produtos afetados

Alt Linux
Safari
Suse
Ubuntu
Webkit
Ios
Tvos
Watchos