CVE-2017-2471 An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-f...
HighCVSS 8.8
EPSS 8.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/webkit2gtk(Debian:12) | < 2.14.6-1 | 2.14.6-1 |
| debian/webkit2gtk(Debian:13) | < 2.14.6-1 | 2.14.6-1 |
| debian/webkit2gtk(Debian:14) | < 2.14.6-1 | 2.14.6-1 |
| apple Safari | = 10.0.3 | No fix listed |
| apple iphone os | = 10.2.1 | No fix listed |
| apple watchOS | = 3.1.3 | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:22.04) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2017-2471 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-3257-1 vendor-advisory
- www.cve.org
- 97133 third-party-advisory vdb-entry
- 1038137 vdb-entry
- bugs.chromium.org
- GLSA-201706-15 vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- 41813 exploit