Apple TV < 10.2 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.2. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in LibTIFF in the DumpModeEncode function within file tifdumpmode.c. An unauthenticated, remote attacker can exploi...

CVE-2017-2390

CVE-2017-2390 affects Apple platforms (iOS prior to 10.3; macOS prior to 10.12.4; tvOS prior to 10.2; watchOS prior to 3.2) due to symlink mishandling in the libarchive component that lets a local attacker change arbitrary directory permissions. Connected Apple security notes indicate this is add...