CVE-2017-2350: Infoleak
WebKit. A prototype access issue was addressed through improved exception handling.
Other sources
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 10.2.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-2350?
CVE-2017-2350 has been classified with a moderate severity level due to its potential for exploitation by remote attackers.
How do I fix CVE-2017-2350?
To address CVE-2017-2350, update affected Apple products to the latest versions, specifically iOS 10.2.1 or later, Safari 10.0.3 or later, and tvOS 10.1.1 or later.
Which products are affected by CVE-2017-2350?
CVE-2017-2350 affects Apple products including iOS versions before 10.2.1, Safari versions before 10.0.3, and tvOS versions before 10.1.1.
What component is involved in CVE-2017-2350?
CVE-2017-2350 involves the WebKit component which is responsible for web rendering in Apple devices.
Can CVE-2017-2350 be exploited remotely?
Yes, CVE-2017-2350 allows for potential remote exploitation by attackers through a prototype access issue.