CVE-2017-2409: High severity Apple iOS and macOS vulnerability
Published Apr 2, 2017
·Updated
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Menus" component. It allows attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted app.
Affected Software
1 affected component
Apple iOS and macOS<=10.12.3
Event History
Apr 2, 2017
CVE Published
via MITRE·01:36 AM
Data Sourced
via MITRE·01:36 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2409?
CVE-2017-2409 is considered a medium severity vulnerability due to its potential to expose sensitive information and cause denial of service.
2
How do I fix CVE-2017-2409?
To fix CVE-2017-2409, update macOS to version 10.12.4 or later.
3
Which versions of macOS are affected by CVE-2017-2409?
CVE-2017-2409 affects macOS versions prior to 10.12.4.
4
What is the impact of CVE-2017-2409?
The impact of CVE-2017-2409 includes sensitive information disclosure and application crashes due to out-of-bounds reads.
5
What component is involved in CVE-2017-2409?
CVE-2017-2409 involves the Menus component of macOS.