CVE-2017-2365: Infoleak

Reference Links

• https://support.apple.com/en-us/HT207482 (Advisory)
• http://www.securityfocus.com/bid/95727
• http://www.securitytracker.com/id/1037668
• https://security.gentoo.org/glsa/201706-15
• https://support.apple.com/HT207482
• https://support.apple.com/HT207484
• https://support.apple.com/HT207485
• https://www.exploit-db.com/exploits/41453/

Parent vulnerabilities

(Appears in the following advisories)

• HT207482

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-2383
• CVE-2017-2375
• CVE-2017-2368
• CVE-2017-2370
• CVE-2017-2360
• CVE-2016-8687
• CVE-2017-2352
• CVE-2017-2350
• CVE-2017-2354
• CVE-2017-2362
• CVE-2017-2373
• CVE-2017-2355
• CVE-2017-2356
• CVE-2017-2369
• CVE-2017-2366
• CVE-2017-2363
• CVE-2017-2364
• CVE-2017-2371
• CVE-2017-2365
• CVE-2017-2351

Frequently Asked Questions

• What is the severity of CVE-2017-2365?

  CVE-2017-2365 has been classified as a moderate severity vulnerability.

• How do I fix CVE-2017-2365?

  To fix CVE-2017-2365, update your affected Apple devices to iOS 10.2.1, Safari 10.0.3, or tvOS 10.1.1.

• Which devices are affected by CVE-2017-2365?

  CVE-2017-2365 affects iOS devices prior to version 10.2.1, Safari versions before 10.0.3, and tvOS versions before 10.1.1.

• What type of vulnerability is CVE-2017-2365?

  CVE-2017-2365 is a validation issue related to variable handling in WebKit.

• Can CVE-2017-2365 be exploited remotely?

  Yes, CVE-2017-2365 can potentially be exploited remotely if users access a malicious web page.