ID:3695 - Exploit for Input validation error - CVE-2017-2371
Published: August 4, 2020
Vulnerability identifier: #VU33457
Vulnerability risk: Medium
CVE-ID: CVE-2017-2371
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to manipulate data.
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
Remediation
Install update from vendor's website.