CVE-2017-7038 A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" compone...
MediumCVSS 6.1
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/webkit2gtk(Debian:12) | < 2.16.3-2 | 2.16.3-2 |
| debian/webkit2gtk(Debian:13) | < 2.16.3-2 | 2.16.3-2 |
| debian/webkit2gtk(Debian:14) | < 2.16.3-2 | 2.16.3-2 |
| apple Safari | < 10.1.2 | 10.1.2 |
| apple iphone os | < 10.3.3 | 10.3.3 |
| apple tvOS | < 10.2.2 | 10.2.2 |
| apple webkit | All versions | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2017-7038 vendor-advisory
- 99888 third-party-advisory vdb-entry
- 1038950 third-party-advisory vdb-entry
- GLSA-201710-14 third-party-advisory vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory