CVE-2017-2363: Infoleak
WebKit. A validation issue existed in the handling of page loading. This issue was addressed through improved logic.
Other sources
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 10.2.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-2363?
CVE-2017-2363 is classified as a high severity vulnerability.
How do I fix CVE-2017-2363?
To mitigate CVE-2017-2363, update your affected Apple devices to iOS 10.2.1, Safari 10.0.3, tvOS 10.1.1, watchOS 3.1.3, or WebKitGTK+ 2.16.3 or later.
Which Apple products are affected by CVE-2017-2363?
CVE-2017-2363 affects iOS devices prior to version 10.2.1, Safari before 10.0.3, tvOS before 10.1.1, and watchOS before 3.1.3.
What is the nature of the vulnerability described in CVE-2017-2363?
CVE-2017-2363 involves a validation issue in the handling of page loading within WebKit.
Is there a known exploit for CVE-2017-2363?
As of now, there are no publicly available exploits specifically targeting CVE-2017-2363.