NVD

Id
85852  
Name
CVE-2017-2522  
Description
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the CoreFoundation component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-03  
Published
2017-05-22  
Modified Date
2017-06-01  
Seq
2017-2522  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421455 85852 CVE-2017-2119 JVN#73083905  View
421456 85852 CVE-2017-2119 96467  View
421457 85852 CVE-2017-2119 https://forum.wbce.org/viewtopic.php?id=977  View
421458 85852 CVE-2017-2119 JVN#73083905  View
421459 85852 CVE-2017-2119 96467  View
421460 85852 CVE-2017-2119 https://forum.wbce.org/viewtopic.php?id=977  View
422350 85852 CVE-2017-0213 98102  View
422351 85852 CVE-2017-0213 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213  View
422352 85852 CVE-2017-0213 98102  View
422353 85852 CVE-2017-0213 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67505 JVNDB-2017-003802 複数の Apple 製品の CoreFoundation コンポーネントにおける任意のコードを実行される脆弱性 複数の Apple 製品の CoreFoundation コンポーネントには、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2017-2522 0 CVE-2017-2522 85852 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003802.html 2017-05-15 2017-06-08 View