CVE-2017-2471

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 8.5%

from disclosure to weapon2 days

Published on NVDApr 2

1st PoC+2d

exploitation probability

8.5%top 6% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/41813/unverified exploitdbwww.exploit-db.com/exploits/41813unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://bugs.chromium.org/p/project-zero/issues/detail?id=1105 https://security.gentoo.org/glsa/201706-15 https://support.apple.com/HT207600 https://support.apple.com/HT207602 https://support.apple.com/HT207617 https://www.exploit-db.com/exploits/41813/http://www.securityfocus.com/bid/97133 http://www.securitytracker.com/id/1038137