CVE-2017-13858: Input Validation

Reference Links

• https://support.apple.com/en-us/HT208331 (Advisory)
• http://www.securityfocus.com/bid/102099
• http://www.securitytracker.com/id/1039966
• https://support.apple.com/HT208331

Parent vulnerabilities

(Appears in the following advisories)

• HT208331

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-13887
• CVE-2017-9798
• CVE-2017-13905
• CVE-2017-7172
• CVE-2017-13892
• CVE-2017-7171
• CVE-2017-7151
• CVE-2017-1000254
• CVE-2017-13872
• CVE-2017-15422
• CVE-2017-13883
• CVE-2017-7163
• CVE-2017-7155
• CVE-2017-13878
• CVE-2017-13875
• CVE-2017-7159
• CVE-2017-13848
• CVE-2017-13858
• CVE-2017-13847
• CVE-2017-7162
• CVE-2017-13904
• CVE-2017-5754
• CVE-2017-13862
• CVE-2017-13867
• CVE-2017-7173
• CVE-2017-13876
• CVE-2017-13855
• CVE-2017-13865
• CVE-2017-13868
• CVE-2017-13869
• CVE-2017-7154
• CVE-2017-13871
• CVE-2017-13860
• CVE-2017-3735
• CVE-2017-12837
• CVE-2017-7158
• CVE-2017-13911
• CVE-2017-13886

Frequently Asked Questions

• What is CVE-2017-13858?

  CVE-2017-13858 is a vulnerability in certain Apple products, specifically macOS before version 10.13.2, that allows attackers to execute arbitrary code in a privileged context via a crafted app.

• How does CVE-2017-13858 affect Apple products?

  CVE-2017-13858 affects certain Apple products, including macOS High Sierra before version 10.13.2, Sierra, and El Capitan.

• What is the severity of CVE-2017-13858?

  CVE-2017-13858 has a severity score of 7.8 out of 10, indicating a critical vulnerability.

• How can I fix CVE-2017-13858?

  To fix CVE-2017-13858, users should update their macOS to version 10.13.2 or higher.

• Where can I find more information about CVE-2017-13858?

  More information about CVE-2017-13858 can be found at the following references: [SecurityFocus](http://www.securityfocus.com/bid/102099), [SecurityTracker](http://www.securitytracker.com/id/1039966), and [Apple Support](https://support.apple.com/HT208331).