Multiple Apple Products CoreFoundation Component Memory Corruption Vulnerability

🗓️ 24 May 2017 00:00:00Reported by China National Vulnerability DatabaseType

CoreFoundation memory corruption flaw across Apple devices; remote attacker can execute code or crash via crafted data.

Reporter	Title	Published	Views	Family All 19
0day.today	Apple iOS / macOS - Memory Corruption Due to Bad Bounds Checking in NSCharacterSet Coding for NSKeye	23 May 201700:00	–	zdt
Tenable Nessus	Apple iOS < 10.3.2 Multiple Vulnerabilities	17 May 201700:00	–	nessus
Tenable Nessus	Apple TV < 10.2.1 Multiple Vulnerabilities	18 May 201700:00	–	nessus
Tenable Nessus	Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities	17 May 201700:00	–	nessus
Apple	About the security content of iOS 10.3.2	15 May 201700:00	–	apple
Apple	About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite	15 May 201700:00	–	apple
Apple	About the security content of tvOS 10.2.1	15 May 201700:00	–	apple
Apple	About the security content of watchOS 3.2.2	15 May 201700:00	–	apple
Apple	About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support	8 Jun 201709:43	–	apple
Apple	About the security content of iOS 10.3.2 - Apple Support	20 Jun 201710:37	–	apple

Vulners

Node

apple iosRange<10.3.2

apple tvosRange<10.2.1

apple macosRange<10.12.5

Source	Link
support	www.support.apple.com/HT207798https://support.apple.com/HT207800https://support.apple.com/HT207801

31 May 2017 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.5

CVSS 39.8

EPSS0.06586