Main Vulnerability Database Vulnerabilities #VU8520

Spoofing attack in Apple Safari - CVE-2017-7106

Published: September 20, 2017

Vulnerability identifier: #VU8520

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7106

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to unknown error. A remote attacker can trick the victim into visiting a specially crafted website and spoof address bar and other parts of web page.

Successful exploitation of this vulnerability may result in information disclosure or malicious actions execution.

Affected software

Apple Safari
Apple iOS

How to mitigate CVE-2017-7106

Update to version 11.

External References

https://support.apple.com/en-us/HT208116

Related Security Bulletins