CVE-2017-2365: Infoleak
WebKit. A validation issue existed in the handling of variable handling. This issue was addressed through improved validation.
Other sources
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 10.2.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-2365?
CVE-2017-2365 has been classified as a moderate severity vulnerability.
How do I fix CVE-2017-2365?
To fix CVE-2017-2365, update your affected Apple devices to iOS 10.2.1, Safari 10.0.3, or tvOS 10.1.1.
Which devices are affected by CVE-2017-2365?
CVE-2017-2365 affects iOS devices prior to version 10.2.1, Safari versions before 10.0.3, and tvOS versions before 10.1.1.
What type of vulnerability is CVE-2017-2365?
CVE-2017-2365 is a validation issue related to variable handling in WebKit.
Can CVE-2017-2365 be exploited remotely?
Yes, CVE-2017-2365 can potentially be exploited remotely if users access a malicious web page.