PT-2017-17500 · Apple · Ios+1

Xisigr · Publicado 2017-10-23 · Atualizado 2017-10-26 · CVE-2017-7085

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11 Safari versions prior to 11

Description The issue involves the Safari component and allows remote attackers to spoof the address bar.

Recommendations For iOS versions prior to 11, update to version 11 or later. For Safari versions prior to 11, update to version 11 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-7085

Produtos afetados

Safari

Ios

Referências · 7

• http://securitytracker.com/id/1039385 · Nota
• http://securityfocus.com/bid/100895 · Nota
• https://support.apple.com/HT208112 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7085 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7085 · Aviso do Fabricante
• http://securitytracker.com/id/1039384 · Nota
• https://support.apple.com/HT208116 · Aviso do Fabricante