Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable700034.PRM
HistoryMar 31, 2017 - 12:00 a.m.

Apple iOS < 10.3 Multiple Vulnerabilities

2017-03-3100:00:00
Tenable
www.tenable.com
22
JSON

The version of iOS running on the mobile device is prior to 10.3, and is affected by multiple vulnerabilities :

  • An unspecified state management flaw exists that may allow a context-dependent attacker to spoof the address bar. No further details have been provided. (CVE-2017-2376)
  • An unspecified flaw exists in the handling of HTTP authentication. This may allow a context-dependent attacker to display authentication sheets on arbitrary web sites and cause a denial of service. (CVE-2017-2389)
  • A flaw exists in the password-protected PDF export feature that is triggered as a weak encryption algorithm is used. This may allow an attacker with access to a password-protected document to potentially disclose the document content. (CVE-2017-2391)
  • A flaw exists in the ‘SecKeyRawVerify()’ function that is triggered as parameters are not properly validated during the handling of cryptographic API calls. This may allow a remote attacker to have an empty signature be accepted as valid. (CVE-2017-2423)

Additional flaws exist in the following components :

  • Carbon (CVE-2017-2379)
  • CoreGraphics (CVE-2017-2417)
  • DataAccess (CVE-2017-2414)
  • FontParser (CVE-2017-2406, CVE-2017-2407)
  • iCloud (CVE-2017-2397)
  • ImageIO (CVE-2017-2416)
  • iTunes Store (CVE-2017-2412)
  • Kernel (CVE-2017-2398, CVE-2017-2401, CVE-2017-2490)
  • libarchive (CVE-2017-2390)
  • Pasteboard (CVE-2017-2399)
  • Quick Look (CVE-2017-2404)
  • Safari (CVE-2017-2384, CVE-2017-2393, CVE-2017-2400)
  • Webkit (CVE-2017-2367, CVE-2017-2378, CVE-2017-2386, CVE-2017-2394, CVE-2017-2395, CVE-2017-2396, CVE-2017-2405, CVE-2017-2415, CVE-2017-2419, CVE-2017-2424, CVE-2017-2433, CVE-2017-2442, CVE-2017-2445, CVE-2017-2446, CVE-2017-2447, CVE-2017-2454, CVE-2017-2455, CVE-2017-2459, CVE-2017-2460, CVE-2017-2464, CVE-2017-2465, CVE-2017-2466, CVE-2017-2468, CVE-2017-2469, CVE-2017-2470, CVE-2017-2471, CVE-2017-2476, CVE-2017-2481)
Binary data 700034.prm
VendorProductVersionCPE
appleiphone_oscpe:/o:apple:iphone_os

References

Related

nessus 6
openvas 3
archlinux 1
ubuntu 1
mageia 1
apple 10
ubuntucve 26
gentoo 1
prion 40
debiancve 25
cve 42
packetstorm 10
seebug 16
zdt 14
zdi 2
attackerkb 1
nessus
nessus
Safari < 10.1 Multiple Vulnerabilities
2017-03-31 00:00:00
Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3257-1)
2017-04-11 00:00:00
Apple TV < 10.2 Multiple Vulnerabilities
2017-04-02 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3257-1)
2017-04-11 00:00:00
Apple Safari Multiple Vulnerabilities (HT207600)
2017-03-31 00:00:00
Mageia: Security Advisory (MGASA-2017-0109)
2022-01-28 00:00:00
archlinux
archlinux
[ASA-201704-9] webkit2gtk: multiple issues
2017-04-28 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2017-04-10 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerability
2017-04-16 09:29:12
apple
apple
About the security content of Safari 10.1
2017-03-27 00:00:00
About the security content of Safari 10.1 - Apple Support
2017-08-29 02:51:42
About the security content of iOS 10.3 - Apple Support
2017-08-01 06:52:17
ubuntucve
ubuntucve
CVE-2017-2396
2017-04-01 00:00:00
CVE-2017-2405
2017-04-01 00:00:00
CVE-2017-2395
2017-04-01 00:00:00
gentoo
gentoo
WebKitGTK+: Multiple vulnerabilities
2017-06-07 00:00:00
prion
prion
Memory corruption
2017-04-02 01:59:00
Design/Logic Flaw
2017-04-02 01:59:00
Design/Logic Flaw
2017-04-02 01:59:00
debiancve
debiancve
CVE-2017-2396
2017-04-02 01:59:00
CVE-2017-2405
2017-04-02 01:59:00
CVE-2017-2476
2017-04-02 01:59:00
cve
cve
CVE-2017-2393
2017-04-02 01:59:00
CVE-2017-2405
2017-04-02 01:59:00
CVE-2017-2395
2017-04-02 01:59:00
packetstorm
packetstorm
WebKit WebCore::toJS Use-After-Free
2017-04-10 00:00:00
Apple Webkit Named Property UXSS
2017-04-09 00:00:00
WebKit Document::adoptNode Use-After-Free
2017-04-09 00:00:00
seebug
seebug
MacOS/iOS kernel double free due to bad locking in fsevents device（CVE-2017-2490）
2017-04-04 00:00:00
Apple Webkit: UXSS by accessing a named property from an unloaded window (CVE-2017-2367)
2017-04-04 00:00:00
WebKit: WebCore::toJS use-after-free（CVE-2017-2476）
2017-04-05 00:00:00
zdt
zdt
Apple WebKit - Document::adoptNode Use-After-Free Exploit
2017-04-12 00:00:00
Apple WebKit - FormSubmission::create Use-After-Free Exploit
2017-04-05 00:00:00
macOS / iOS Kernel 10.12.3 (16D32) - Double-Free Due to Bad Locking in fsevents Device Exploit
2017-04-05 00:00:00
zdi
zdi
Apple Safari ElementData Use-After-Free Remote Code Execution Vulnerability
2017-03-28 00:00:00
Apple Safari Node Use-After-Free Remote Code Execution Vulnerability
2017-06-22 00:00:00
attackerkb
attackerkb
Remote code execution triggered by malformed GIF in ImageIO framework, affecting most iOS/macOS apps
2017-04-02 00:00:00
JSON
Related for 700034.PRM
nessus6openvas3archlinux1ubuntu1mageia1apple10ubuntucve26gentoo1prion40debiancve25cve42packetstorm10seebug16zdt14zdi2attackerkb1