CVE-2017-13798
45Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck y tiene prueba de concepto pública.
ssvc Actepss 6.3%
de la publicación al arma9 días
Publicada en NVD13 nov
1ª PoC+9d
VulnCheck+2366d
probabilidad de explotación
6.3%top 7% de las CVE
explotación observada
síVulnCheck
2 exploit(s) público(s)
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Productos afectados
n/a · n/aPoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/43175/no verificadoexploitdbwww.exploit-db.com/exploits/43175no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://security.gentoo.org/glsa/201712-01https://support.apple.com/HT208219https://support.apple.com/HT208222https://support.apple.com/HT208223https://support.apple.com/HT208224https://support.apple.com/HT208225https://www.exploit-db.com/exploits/43175/http://www.securitytracker.com/id/1039703