Denial of service in Apple iOS - CVE-2017-2495
Published: May 16, 2017
Vulnerability identifier: #VU6552
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-2495
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS conditions on the target device.
The weakness exists due to a memory handling error in Safari's history menu. A remote attacker can create a specially crafted webpage, trick the victim into visiting it and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
The weakness exists due to a memory handling error in Safari's history menu. A remote attacker can create a specially crafted webpage, trick the victim into visiting it and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
Affected software
Apple iOS
How to mitigate CVE-2017-2495
Update to version 10.3.2.