CVE-2017-7059

Опубликовано: 20 июл. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

Ссылки

http://www.securityfocus.com/bid/99886
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038950
Third Party Advisory
VDB Entry
https://support.apple.com/HT207921
Vendor Advisory
https://support.apple.com/HT207923
Vendor Advisory
https://support.apple.com/HT207924
Vendor Advisory
http://www.securityfocus.com/bid/99886
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038950
Third Party Advisory
VDB Entry
https://support.apple.com/HT207921
Vendor Advisory
https://support.apple.com/HT207923
Vendor Advisory
https://support.apple.com/HT207924
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 10.1.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 10.3.3 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 10.2.2 (исключая)

EPSS

Процентиль: 65%

0.00489

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-7059

CVSS3: 6.1

ubuntu

больше 8 лет назад

CVE-2017-7059

CVSS3: 6.1

debian

больше 8 лет назад

A DOMParser XSS issue was discovered in certain Apple products. iOS be ...

GHSA-33gg-5m74-52cv

CVSS3: 6.1

github

больше 3 лет назад

openSUSE-SU-2018:0326-1

suse-cvrf

около 8 лет назад

Security update for webkit2gtk3

SUSE-SU-2018:0219-1

suse-cvrf

около 8 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 65%

0.00489

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79