CVE-2017-2370

30Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendepss 11%

de la publicación al arma0 días

Publicada en NVD20 feb

1ª PoC26 ene

probabilidad de explotación

11%top 4% de las CVE

explotación observada

noninguna fuente lo reporta

6 exploit(s) público(s)

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 6

githubgithub.com/Peterpan0927/CVE-2017-2370★ 20 githubgithub.com/Rootkitsmm-zz/extra_recipe-iOS-10.2★ 1 githubgithub.com/maximehip/extra_recipe★ 0 githubgithub.com/ldebug/extra_recipe★ 0 cve_referencewww.exploit-db.com/exploits/41163/no verificado exploitdbwww.exploit-db.com/exploits/41163no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

https://bugs.chromium.org/p/project-zero/issues/detail?id=1004 https://support.apple.com/HT207482 https://support.apple.com/HT207483 https://support.apple.com/HT207485 https://support.apple.com/HT207487 https://www.exploit-db.com/exploits/41163/http://www.securityfocus.com/bid/95731 http://www.securitytracker.com/id/1037668