CVE-2017-2350: Infoleak

Reference Links

• https://support.apple.com/en-us/HT207482 (Advisory)
• http://www.securityfocus.com/bid/95727
• http://www.securitytracker.com/id/1037668
• https://security.gentoo.org/glsa/201706-15
• https://support.apple.com/HT207482
• https://support.apple.com/HT207484
• https://support.apple.com/HT207485

Parent vulnerabilities

(Appears in the following advisories)

• HT207482

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-2383
• CVE-2017-2375
• CVE-2017-2368
• CVE-2017-2370
• CVE-2017-2360
• CVE-2016-8687
• CVE-2017-2352
• CVE-2017-2350
• CVE-2017-2354
• CVE-2017-2362
• CVE-2017-2373
• CVE-2017-2355
• CVE-2017-2356
• CVE-2017-2369
• CVE-2017-2366
• CVE-2017-2363
• CVE-2017-2364
• CVE-2017-2371
• CVE-2017-2365
• CVE-2017-2351

Frequently Asked Questions

• What is the severity of CVE-2017-2350?

  CVE-2017-2350 has been classified with a moderate severity level due to its potential for exploitation by remote attackers.

• How do I fix CVE-2017-2350?

  To address CVE-2017-2350, update affected Apple products to the latest versions, specifically iOS 10.2.1 or later, Safari 10.0.3 or later, and tvOS 10.1.1 or later.

• Which products are affected by CVE-2017-2350?

  CVE-2017-2350 affects Apple products including iOS versions before 10.2.1, Safari versions before 10.0.3, and tvOS versions before 10.1.1.

• What component is involved in CVE-2017-2350?

  CVE-2017-2350 involves the WebKit component which is responsible for web rendering in Apple devices.

• Can CVE-2017-2350 be exploited remotely?

  Yes, CVE-2017-2350 allows for potential remote exploitation by attackers through a prototype access issue.