Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2017-2469

Published: 02/04/2017 Updated: 08/03/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Apple

Vulnerability Summary

An issue exists in certain Apple products. iOS prior to 10.3 is affected. Safari prior to 10.1 is affected. tvOS prior to 10.2 is affected. The issue involves the "WebKit" component. It allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os

apple tvos

apple safari

Vendor Advisories

Arch Linux Issues:
An issue has been found in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site ...
Ubuntu Security Notice: webkit2gtk vulnerabilities
Several security issues were fixed in WebKitGTK+ ...
Arch Linux Advisories: [ASA-201704-9] webkit2gtk: multiple issues
Arch Linux Security Advisory ASA-201704-9 ========================================= Severity: Critical Date : 2017-04-28 CVE-ID : CVE-2016-9642 CVE-2016-9643 CVE-2017-2367 CVE-2017-2376 CVE-2017-2377 CVE-2017-2386 CVE-2017-2392 CVE-2017-2394 CVE-2017-2395 CVE-2017-2396 CVE-2017-2405 CVE-2017-2415 CVE-2017-2419 CVE ...

Exploits

Exploit DB: Apple WebKit - 'JSC::SymbolTableEntry::isWatchable' Heap Buffer Overflow
<!-- Source: bugschromiumorg/p/project-zero/issues/detail?id=1098 I confirmed the PoC crashes the release version of Safari 1003(1260248) (It might need to refresh the page several times) PoC: --> (function (x = 0) { var a; { function arguments() { } function b() { var g = 1; ...

Mailing Lists

Packetstorm: WebKit JSC::SymbolTableEntry::isWatchable Heap Buffer Overflow
WebKit suffers from a heap buffer overflow vulnerability in JSC::SymbolTableEntry::isWatchable ...

References

CWE-119https://support.apple.com/HT207617https://support.apple.com/HT207601https://support.apple.com/HT207600http://www.securityfocus.com/bid/97130https://security.gentoo.org/glsa/201706-15http://www.securitytracker.com/id/1038137https://www.exploit-db.com/exploits/41869/https://www.exploit-db.com/exploits/41869/https://nvd.nist.govhttps://usn.ubuntu.com/3257-1/https://tools.cisco.com/security/center/viewAlert.x?alertId=53194
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2023-21068CVE-2023-21077unspecifiedCVE-2023-21070CVE-2023-21016file upload
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook