CVE-2017-2360: Use After Free

Reference Links

• https://support.apple.com/en-us/HT207482 (Advisory)
• http://www.securityfocus.com/bid/95729
• http://www.securityfocus.com/bid/95731
• http://www.securitytracker.com/id/1037668
• https://support.apple.com/HT207482
• https://support.apple.com/HT207483
• https://support.apple.com/HT207485
• https://support.apple.com/HT207487
• https://www.exploit-db.com/exploits/41165/

Parent vulnerabilities

(Appears in the following advisories)

• HT207482

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-2383
• CVE-2017-2375
• CVE-2017-2368
• CVE-2017-2370
• CVE-2017-2360
• CVE-2016-8687
• CVE-2017-2352
• CVE-2017-2350
• CVE-2017-2354
• CVE-2017-2362
• CVE-2017-2373
• CVE-2017-2355
• CVE-2017-2356
• CVE-2017-2369
• CVE-2017-2366
• CVE-2017-2363
• CVE-2017-2364
• CVE-2017-2371
• CVE-2017-2365
• CVE-2017-2351

Frequently Asked Questions

• What is the severity of CVE-2017-2360?

  CVE-2017-2360 has been categorized with a severity rating that signifies a high risk of exploitation in affected Apple products.

• Which Apple products are affected by CVE-2017-2360?

  CVE-2017-2360 affects iOS versions before 10.2.1, macOS versions before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3.

• How do I fix CVE-2017-2360?

  To fix CVE-2017-2360, update your device to the latest version of the affected software, specifically iOS 10.2.1 or later, macOS 10.12.3 or later, tvOS 10.1.1 or later, or watchOS 3.1.3 or later.

• What type of vulnerability is CVE-2017-2360?

  CVE-2017-2360 is classified as a use after free vulnerability, which occurs when memory is improperly freed and subsequently accessed.

• Can CVE-2017-2360 affect my device's security?

  Yes, CVE-2017-2360 can potentially allow an attacker to execute arbitrary code, thereby compromising the device's security.