Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2017-2355

CVE-2017-2355, high severity (CVSS 8.8): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
8.8

NVD scale

Exploitation
2.1 %

EPSS, predicted over 30 days

Tracked apps
2
Still exposed
0

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site.

Attack vector : Network No privileges required
Show raw CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS 2.06% above median percentile 80.7%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Safari macOS com.apple.Safari
    Affected <10.0.3 Fixed in 10.0.3 Latest tracked - undetermined
  • iTunes Windows winget:Apple.iTunes
    Affected <12.5.5 Fixed in 12.5.5 Latest tracked 12.13.11.1 patched
    Observed affected builds (1)
    10.7.0.21

NVD references 6 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (2)
Vendor Product Versions
apple safari
All platforms (wildcard)
 <10.0.3
apple itunes
Windows
 <12.5.5
View on NVD ↗ Advisory · support.apple.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM