CVE-2017-2449: Use After Free
Published Apr 2, 2017
·Updated
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
Affected Software
1 affected component
Apple iOS and macOS<=10.12.3
Event History
Apr 2, 2017
CVE Published
via MITRE·01:36 AM
Data Sourced
via MITRE·01:36 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2449?
CVE-2017-2449 has a high severity rating due to the potential for remote code execution or denial of service.
2
How do I fix CVE-2017-2449?
To fix CVE-2017-2449, update your macOS to version 10.12.4 or later.
3
What types of attacks can exploit CVE-2017-2449?
CVE-2017-2449 can be exploited to execute arbitrary code in a privileged context or to cause a denial of service.
4
Which versions of macOS are affected by CVE-2017-2449?
CVE-2017-2449 affects macOS versions prior to 10.12.4.
5
Is there a workaround for CVE-2017-2449?
There is no documented workaround for CVE-2017-2449; the recommended action is to apply the necessary update.