NVD

Id
85854  
Name
CVE-2017-2524  
Description
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the TextInput component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-05-22  
Modified Date
2017-07-07  
Seq
2017-2524  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421467 85854 CVE-2017-2123 JVN#49408248  View
421468 85854 CVE-2017-2123 96613  View
421469 85854 CVE-2017-2123 https://onethird.net/en/p1277.html  View
421470 85854 CVE-2017-2123 JVN#49408248  View
421471 85854 CVE-2017-2123 96613  View
421472 85854 CVE-2017-2123 https://onethird.net/en/p1277.html  View
422358 85854 CVE-2017-0220 98111  View
422359 85854 CVE-2017-0220 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0220  View
422360 85854 CVE-2017-0220 98111  View
422361 85854 CVE-2017-0220 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0220  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67507 JVNDB-2017-003804 複数の Apple 製品の TextInput コンポーネントにおける任意のコードを実行される脆弱性 複数の Apple 製品の TextInput コンポーネントには、任意のコードを実行される、またはサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2017-2524 0 CVE-2017-2524 85854 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003804.html 2017-05-15 2017-06-08 View