PT-2017-1778 · Apple+1 · Tvos+5

Kai Kang · Publicado 2017-04-01 · Atualizado 2019-03-08 · CVE-2017-2415

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Safari versions prior to 10.1 tvOS versions prior to 10.2 watchOS versions prior to 3.2

Description The issue involves the WebKit component and allows remote attackers to execute arbitrary code by leveraging an unspecified type confusion. This is caused by the allocation and initialization of resources using incompatible types.

Recommendations For iOS versions prior to 10.3, update to version 10.3 or later. For Safari versions prior to 10.1, update to version 10.1 or later. For tvOS versions prior to 10.2, update to version 10.2 or later. For watchOS versions prior to 3.2, update to version 3.2 or later.

Correção

Type Confusion

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

BDU:2017-00934

CVE-2017-2415

USN-3257-1

Produtos afetados

Safari

Ubuntu

Webkit

Ios

Tvos

Watchos

Referências · 51

• https://ubuntu.com/security/CVE-2017-2447 · Aviso do Fabricante
• https://support.apple.com/HT207600 · Aviso do Fabricante
• http://securitytracker.com/id/1038137 · Nota
• https://support.apple.com/HT207602 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2481 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2376 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2415 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-2415 · Aviso do Fabricante
• https://support.apple.com/HT207617 · Aviso do Fabricante
• https://support.apple.com/HT207601 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2433 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-2454 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3257-1 · Aviso do Fabricante
• https://webkitgtk.org/security/WSA-2017-0003.html · Nota
• https://ubuntu.com/security/CVE-2017-2460 · Aviso do Fabricante