PT-2017-1741 · Apple · Ios

Published 2017-04-02 · Updated 2026-05-06 · CVE-2017-2404

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3

Description The issue involves the Quick Look component and allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document. This issue has been exploited in the wild. The vulnerability is related to errors in security settings.

Recommendations For iOS versions prior to 10.3, consider disabling the Quick Look component or restricting its use until a patch is available. As a temporary workaround, avoid using Quick Look to open PDF documents from untrusted sources.

Fix

Open Redirect

Weakness Enumeration

CWE-601

CWE-254

Related Identifiers

BDU:2017-00897

CVE-2017-2404

Affected Products

Ios

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2017-2404 · Security Note
• https://support.apple.com/HT207617 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2404 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00897 · Security Note
• http://securitytracker.com/id/1038139 · Note
• http://securityfocus.com/bid/97138 · Note
• https://engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload · Note
• https://t.me/cveNotify/162373 · Telegram Post