CVE-2017-2431: Buffer Overflow
Published Apr 2, 2017
·Updated
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "CoreMedia" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .mov file.
Affected Software
1 affected component
Apple iOS and macOS<=10.12.3
Event History
Apr 2, 2017
CVE Published
via MITRE·01:36 AM
Data Sourced
via MITRE·01:36 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2431?
CVE-2017-2431 has been rated as high severity due to the potential for remote code execution.
2
How do I fix CVE-2017-2431?
To fix CVE-2017-2431, users should upgrade their macOS to version 10.12.4 or later.
3
Which versions of macOS are affected by CVE-2017-2431?
CVE-2017-2431 affects macOS versions prior to 10.12.4.
4
What kind of attacks can CVE-2017-2431 facilitate?
CVE-2017-2431 can facilitate remote code execution or cause denial of service through crafted .mov files.
5
Who is impacted by CVE-2017-2431?
Users of macOS versions before 10.12.4 are impacted by CVE-2017-2431.