PT-2017-17500 · Apple · Ios+1

Xisigr · Published 2017-10-23 · Updated 2017-10-26 · CVE-2017-7085

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11 Safari versions prior to 11

Description The issue involves the Safari component and allows remote attackers to spoof the address bar.

Recommendations For iOS versions prior to 11, update to version 11 or later. For Safari versions prior to 11, update to version 11 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-7085

Affected Products

Safari

Ios

References · 7

• https://support.apple.com/HT208112 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7085 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7085 · Vendor Advisory
• https://support.apple.com/HT208116 · Vendor Advisory
• http://securitytracker.com/id/1039385 · Note
• http://securityfocus.com/bid/100895 · Note
• http://securitytracker.com/id/1039384 · Note