5
CVSSv2

CVE-2017-7063

Published: 20/07/2017 Updated: 03/10/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

An issue exists in certain Apple products. iOS prior to 10.3.3 is affected. watchOS prior to 3.2.3 is affected. The issue involves the "Messages" component. It allows remote malicious users to cause a denial of service (memory consumption and application crash).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple watchos

apple iphone os

Recent Articles

Apple hurls out patches for dozens of security holes in iOS, macOS
The Register • Shaun Nichols in San Francisco • 19 Jul 2017

Project Zero, GCHQ, and city of Mishawaka, Indiana among credited bug-hunters

Apple has today released patches addressing roughly four dozen exploitable security vulnerabilities in iOS, macOS, and WatchOS. The iOS 10.3.3 update resolves 47 flaws for the iPhone, iPad and iPod Touch, including multiple remote code execution holes in the WebKit browser engine. Fixes were also posted for the Apple Watch's WatchOS firmware. Of the CVE-listed flaws in the update, 23 were found in WebKit, the browser engine Apple uses for iOS and Safari. Those include 16 memory corruption errors...