CVE-2017-6986

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

CVE-2017-6981

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks...

CVE-2017-6981

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks...

CVE-2017-2497

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book...

Code injection

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks...

Code injection

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

CVE-2017-6981

CVE-2017-6981 affects Apple iBooks in iOS before 10.3.2 and macOS before 10.12.5. The issue is a path validation/symlink handling flaw in iBooks that could allow a crafted app to execute arbitrary code with root/kernel privileges in a privileged context. Apple’s security content notes the fix as ...

CVE-2017-2497

CVE-2017-2497 affects Apple iBooks on affected macOS/iOS versions. In iBooks, a URL handling issue exists that could allow a remote attacker to trigger visits to arbitrary URLs through a crafted book, potentially leading to unintended web navigation without user consent. The issue is described in...

CVE-2017-6986

CVE-2017-6986 affects macOS Sierra/iBooks. Apple’s security content lists an iBooks memory corruption issue that could allow an unauthenticated app to escape the sandbox and gain privileges. The entry is tied to macOS Sierra 10.12.4 and later patches, addressed in macOS 10.12.5 Security Update (E...

CVE-2017-6981

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks...

CVE-2017-2497

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book...

CVE-2017-6986

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

macOS 10.12.x < 10.12.5 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the Kernel component that allow a local attacker to gain kernel-level privileges. CVE-2017-2494, CVE-2017-2546 - A...

Apple macOS Sierra iBooks Information Disclosure Vulnerability

iBooks is a great tool for reading and buying books applied to various Apple devices. A sensitive information disclosure vulnerability exists in the iBooks component. The vulnerability allows an attacker to exploit the vulnerability to obtain sensitive information...

Apple iOS < 10.3.2 Multiple Vulnerabilities

Binary data 700116.prm...

Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities

Binary data 700119.prm...

iBooks information disclosure(CVE-2017-2497)

What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, C...

About the security content of iOS 10.3.2

About the security content of iOS 10.3.2 This document describes the security content of iOS 10.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the iBooks component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a URL in the iBooks file...