Published: 03/04/2018 Updated: 08/03/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 686

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

An issue exists in certain Apple products. iOS prior to 10.3.2 is affected. Safari prior to 10.1.1 is affected. tvOS prior to 10.2.1 is affected. The issue involves the "JavaScriptCore" component. It allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari
apple tvos
apple iphone os

<!-- Source: bugschromiumorg/p/project-zero/issues/detail?id=1208 After JSGlobalObject::haveABadTime is called, the type of all JavaScript arrays(including newly created arrays) are of the same type: ArrayWithSlowPutArrayStorage But (of course) this only affects objects that share the same JSGlobalObject So arrays come from another ...

WebKit JSC suffers from a JSGlobalObject::haveABadTime type confusion vulnerability ...

PS4 5.01 WebKit Exploit PoC

PS4 501 WebKit Exploit PoC Based on: CVE-2017-7005 PegaSwitch (Copyright 2017 ReSwitched Team) 40x exploit by qwertyoruiopz This exploit supports 501 (maybe others)! Installation Install the latest version of node from nodejsorg Clone this repository Run npm install Usage Run npm start License MIT License See attached LICENSEmd file

PS4-5.xx-WebKit-Exploit that allows you to dump libkernel and libSceWebKit2. Originally forked from ALEXZZZ9.

PS4 501, 505, 550(beta) WebKit Exploit PoC Based on: CVE-2017-7005 PegaSwitch (Copyright 2017 ReSwitched Team) 40x exploit by qwertyoruiopz This exploit supports 501, 505 as well as 550 beta Screenshot Installation Install the latest version of node from nodejsorg Clone this repository Run npm install Usage Run npm start License MIT License See attached LICENSE

CWE-119 https://support.apple.com/HT207804 https://support.apple.com/HT207801 https://support.apple.com/HT207798 https://www.exploit-db.com/exploits/42188/https://github.com/Quindecim/Orbis-Exploit-5.x https://nvd.nist.gov https://www.exploit-db.com/exploits/42188/https://github.com/ALEXZZZ9/PS4-5.01-WebKit-Exploit-PoC

CVE-2017-7005

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect