| Vulnerability Name: | CVE-2017-7010 (CCN-129164) | ||||||||||||||||||||
| Assigned: | 2017-07-19 | ||||||||||||||||||||
| Published: | 2017-07-19 | ||||||||||||||||||||
| Updated: | 2019-03-08 | ||||||||||||||||||||
| Summary: | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "libxml2" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted XML file. | ||||||||||||||||||||
| CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-125 | ||||||||||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2017-7010 Source: BID Type: Third Party Advisory, VDB Entry 99889 Source: CCN Type: BID-99889 Apple iOS/iCloud/iTunes/macOS/TvOS CVE-2017-7010 Information Disclosure Vulnerability Source: SECTRACK Type: Third Party Advisory, VDB Entry 1038950 Source: XF Type: UNKNOWN apple-macos-cve20177010-info-disc(129164) Source: CCN Type: Apple security document HT207922 About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite Source: CCN Type: Apple security document HT207923 About the security content of iOS 10.3.3 Source: CCN Type: Apple security document HT207924 About the security content of tvOS 10.2.2 Source: CCN Type: Apple security document HT207927 About the security content of iCloud for Windows 6.2.2 Source: CCN Type: Apple security document HT207928 About the security content of iTunes 12.6.2 for Windows Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207922 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207923 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207924 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207927 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT207928 | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration 3: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||