Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2370

Опубликовано: 20 фев. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 9.3
EPSS Высокий

Описание

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия до 10.2.1 (исключая)
Конфигурация 2
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Версия до 10.12.3 (исключая)
Конфигурация 3
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Версия до 3.1.3 (исключая)
Конфигурация 4
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Версия до 10.1.1 (исключая)

EPSS

Процентиль: 99%
0.74242
Высокий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.

EPSS

Процентиль: 99%
0.74242
Высокий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119