CVE-2017-2403: High severity Apple iOS and macOS vulnerability
Published Apr 2, 2017
·Updated
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL.
Affected Software
1 affected component
Apple iOS and macOS<=10.12.3
Event History
Apr 2, 2017
CVE Published
via MITRE·01:36 AM
Data Sourced
via MITRE·01:36 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2403?
CVE-2017-2403 has a high severity rating due to its potential to allow remote arbitrary code execution.
2
Which versions of macOS are affected by CVE-2017-2403?
CVE-2017-2403 affects macOS versions prior to 10.12.4.
3
How do I fix CVE-2017-2403?
To fix CVE-2017-2403, update your macOS to version 10.12.4 or later.
4
What type of vulnerability is CVE-2017-2403 classified as?
CVE-2017-2403 is classified as a format-string vulnerability within the Printing component.
5
Can CVE-2017-2403 be exploited remotely?
Yes, CVE-2017-2403 can be exploited remotely via crafted ipp: or ipps: URLs.