ByteOS Network

Vulnerability Details :

CVE-2017-2476

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-02 Apr, 2017 | 01:36

Updated At-05 Aug, 2024 | 13:55

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:02 Apr, 2017 | 01:36

Updated At:05 Aug, 2024 | 13:55

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/41814/	exploit x_refsource_EXPLOIT-DB
http://www.securitytracker.com/id/1038137	vdb-entry x_refsource_SECTRACK
https://support.apple.com/HT207601	x_refsource_CONFIRM
http://www.securityfocus.com/bid/97130	vdb-entry x_refsource_BID
https://security.gentoo.org/glsa/201706-15	vendor-advisory x_refsource_GENTOO
https://bugs.chromium.org/p/project-zero/issues/detail?id=1114	x_refsource_MISC
https://support.apple.com/HT207600	x_refsource_CONFIRM
https://support.apple.com/HT207617	x_refsource_CONFIRM

Hyperlink: https://www.exploit-db.com/exploits/41814/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.securitytracker.com/id/1038137

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://support.apple.com/HT207601

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/97130

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://security.gentoo.org/glsa/201706-15

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://bugs.chromium.org/p/project-zero/issues/detail?id=1114

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT207600

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT207617

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/41814/	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.securitytracker.com/id/1038137	vdb-entry x_refsource_SECTRACK x_transferred
https://support.apple.com/HT207601	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/97130	vdb-entry x_refsource_BID x_transferred
https://security.gentoo.org/glsa/201706-15	vendor-advisory x_refsource_GENTOO x_transferred
https://bugs.chromium.org/p/project-zero/issues/detail?id=1114	x_refsource_MISC x_transferred
https://support.apple.com/HT207600	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT207617	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.exploit-db.com/exploits/41814/

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://www.securitytracker.com/id/1038137

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://support.apple.com/HT207601

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/97130

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201706-15

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: https://bugs.chromium.org/p/project-zero/issues/detail?id=1114

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT207600

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT207617

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:02 Apr, 2017 | 01:59

Updated At:13 May, 2026 | 00:24

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Apple Inc.

>>safari>>Versions before 10.1(exclusive)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>Versions before 10.3(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>tvos>>Versions before 10.2(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/97130	product-security@apple.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038137	product-security@apple.com	Third Party Advisory VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1114	product-security@apple.com	Exploit Third Party Advisory
https://security.gentoo.org/glsa/201706-15	product-security@apple.com	Third Party Advisory
https://support.apple.com/HT207600	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT207601	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT207617	product-security@apple.com	Vendor Advisory
https://www.exploit-db.com/exploits/41814/	product-security@apple.com	Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/97130	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038137	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1114	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
https://security.gentoo.org/glsa/201706-15	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/HT207600	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/HT207601	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/HT207617	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://www.exploit-db.com/exploits/41814/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry

Hyperlink: http://www.securityfocus.com/bid/97130

Source: product-security@apple.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1038137

Source: product-security@apple.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://bugs.chromium.org/p/project-zero/issues/detail?id=1114

Source: product-security@apple.com

Resource:

Exploit

Third Party Advisory

Hyperlink: https://security.gentoo.org/glsa/201706-15

Source: product-security@apple.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/HT207600

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT207601

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT207617

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://www.exploit-db.com/exploits/41814/

Source: product-security@apple.com

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/97130