Skip to content
Appaloosa Scout

Vulnerability · NVD

CVE-2017-2391

MEDIUM 5.3

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.

Attack vector : Network No privileges required No user interaction
Show raw CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS 0.96% above median percentile 58.3%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Keynote macOS com.apple.iWork.Keynote
    Affected ≤7.0.5 Fixed in > 7.0.5 Latest tracked — undetermined
  • Numbers macOS com.apple.iWork.Numbers
    Affected ≤4.0.5 Fixed in > 4.0.5 Latest tracked — undetermined
  • Pages macOS com.apple.iWork.Pages
    Affected ≤6.0.5 Fixed in > 6.0.5 Latest tracked — undetermined
  • Keynote iOS com.apple.keynote
    Affected ≤3.0.5 Fixed in > 3.0.5 Latest tracked 15.3 patched
  • Keynote iOS com.apple.Keynote
    Affected ≤3.0.5 Fixed in > 3.0.5 Latest tracked 15.3 patched
  • Numbers iOS com.apple.numbers
    Affected ≤3.0.5 Fixed in > 3.0.5 Latest tracked 15.3 patched
  • Numbers iOS com.apple.Numbers
    Affected ≤3.0.5 Fixed in > 3.0.5 Latest tracked 15.3 patched
  • Pages iOS com.apple.pages
    Affected ≤3.0.5 Fixed in > 3.0.5 Latest tracked 15.3 patched
  • Pages iOS com.apple.Pages
    Affected ≤3.0.5 Fixed in > 3.0.5 Latest tracked 15.3 patched
Vulnerable CPE configurations (6)
Vendor Product Versions
apple keynote
macOS
 ≤7.0.5
apple numbers
macOS
 ≤4.0.5
apple pages
macOS
 ≤6.0.5
apple keynote
iOS
 ≤3.0.5
apple numbers
iOS
 ≤3.0.5
apple pages
iOS
 ≤3.0.5
View on NVD ↗ Advisory · support.apple.com