Main Vulnerability Database Vulnerabilities #VU11213

Memory corruption in Apple Inc. products - CVE-2017-7160

Published: March 22, 2018 / Updated: March 22, 2018

Vulnerability identifier: #VU11213

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2017-7160

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Apple Inc.

Affected software:
Apple iOS
Apple Safari
iCloud for Windows
iTunes

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error. A remote attacker can trigger memory corruption and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Update to versions iOS 11.2, Safari 11.0.2, iCloud 7.2 on Windows, iTunes 12.7.2 on Windows or tvOS 11.2.