← Voltar para CVEs
CVE-2017-2497
N/ADescricao
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado5/22/2017
Ultima modificacao4/20/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
apple:iphone_osapple:mac_os_x
Fraquezas (CWE)
CWE-601
Referencias
http://www.securitytracker.com/id/1038484(product-security@apple.com)
https://support.apple.com/HT207797(product-security@apple.com)
https://support.apple.com/HT207798(product-security@apple.com)
http://www.securitytracker.com/id/1038484(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT207797(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT207798(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.