Published: 20/07/2017 Updated: 22/03/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

An issue exists in certain Apple products. iOS prior to 10.3.3 is affected. Safari prior to 10.1.2 is affected. iCloud prior to 6.2.2 on Windows is affected. iTunes prior to 12.6.2 on Windows is affected. tvOS prior to 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple tvos
apple safari
apple icloud
apple itunes
apple webkit -

Several security issues were fixed in WebKitGTK+ ...

Several memory corruption issues have been found in WebKitGTK+ <= 2165, leading to arbitrary code execution when processing maliciously crafted web contents ...

<!-- Source: bugschromiumorg/p/project-zero/issues/detail?id=1240 JSObject::putInlineSlow and JSValue::putToPrimitive use getPrototypeDirect instead of getPrototype to get an object's prototype So JSDOMWindow::getPrototype which checks the Same Origin Policy is not called The PoC shows to call a setter of another origin's object ...

WebKit JSC JSObject::putInlineSlow and JSValue::putToPrimitive suffer from a universal cross site scripting vulnerability ...

CWE-119 https://support.apple.com/HT207928 https://support.apple.com/HT207927 https://support.apple.com/HT207924 https://support.apple.com/HT207923 https://support.apple.com/HT207921 http://www.securitytracker.com/id/1038950 http://www.securityfocus.com/bid/99885 https://www.exploit-db.com/exploits/42378/https://security.gentoo.org/glsa/201710-14 https://usn.ubuntu.com/3376-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/42378/

CVE-2017-7037

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect