First published: Sun Apr 02 2017(Updated: )
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | <=10.12.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-2388 has a high severity rating due to the potential for denial of service attacks.
To fix CVE-2017-2388, you should update to macOS version 10.12.4 or later.
CVE-2017-2388 specifically affects macOS versions before 10.12.4.
While CVE-2017-2388 leads to denial of service, it does not directly cause data loss.
If your device is running macOS versions up to 10.12.3, it is vulnerable to CVE-2017-2388.