Vulnerability Name: | CVE-2017-6991 (CCN-126035) | ||||||||||||||||||||
Assigned: | 2017-05-10 | ||||||||||||||||||||
Published: | 2017-05-10 | ||||||||||||||||||||
Updated: | 2017-07-08 | ||||||||||||||||||||
Summary: | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. | ||||||||||||||||||||
CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
7.7 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||||
CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||
Vulnerability Type: | CWE-119 | ||||||||||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2017-6991 Source: SECTRACK Type: UNKNOWN 1038484 Source: XF Type: UNKNOWN apple-cve20176991-code-exec(126035) Source: CCN Type: Apple security document HT207797 About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite Source: CCN Type: Apple security document HT207798 About the security content of iOS 10.3.2 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207797 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207798 Source: CCN Type: ZDI-17-360 (Pwn2Own) Apple Safari WebSQL Type Confusion Information Disclosure Vulnerability | ||||||||||||||||||||
Vulnerable Configuration: | Configuration 1:![]() | ||||||||||||||||||||
Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
BACK |