PT-2017-1741 · Apple · Ios

Publicado 2017-04-02 · Atualizado 2026-05-06 · CVE-2017-2404

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3

Description The issue involves the Quick Look component and allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document. This issue has been exploited in the wild. The vulnerability is related to errors in security settings.

Recommendations For iOS versions prior to 10.3, consider disabling the Quick Look component or restricting its use until a patch is available. As a temporary workaround, avoid using Quick Look to open PDF documents from untrusted sources.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

CWE-254

Identificadores relacionados

BDU:2017-00897

CVE-2017-2404

Produtos afetados

Ios

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2017-2404 · Nota de Segurança
• https://support.apple.com/HT207617 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2404 · Aviso do Fabricante
• http://securitytracker.com/id/1038139 · Nota
• http://securityfocus.com/bid/97138 · Nota
• https://engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload · Nota
• https://bdu.fstec.ru/vul/2017-00897 · Nota de Segurança
• https://t.me/cveNotify/162373 · Publicação no Telegram