CVE-2017-6981

CVE-2017-6981 affects Apple iBooks in iOS before 10.3.2 and macOS before 10.12.5. The issue is a path validation/symlink handling flaw in iBooks that could allow a crafted app to execute arbitrary code with root/kernel privileges in a privileged context. Apple’s security content notes the fix as ...

CVE-2017-6981

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks...