First published: Sun Apr 02 2017(Updated: )
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Menus" component. It allows attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted app.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | <=10.12.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-2409 is considered a medium severity vulnerability due to its potential to expose sensitive information and cause denial of service.
To fix CVE-2017-2409, update macOS to version 10.12.4 or later.
CVE-2017-2409 affects macOS versions prior to 10.12.4.
The impact of CVE-2017-2409 includes sensitive information disclosure and application crashes due to out-of-bounds reads.
CVE-2017-2409 involves the Menus component of macOS.