First published: Mon Mar 27 2017(Updated: )
Safari. A spoofing issue existed in the handling of FaceTime prompts. This issue was addressed through improved input validation.
Credit: xisigr Tencent product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <=10.0.3 | |
Apple iPhone OS | <=10.2.1 | |
Apple iOS | <10.3 | 10.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-2453 is classified as a vulnerability with a moderate severity due to the potential for spoofing attacks.
To fix CVE-2017-2453, update your Apple Safari to version 10.1 or later and ensure your iOS is upgraded to at least version 10.3.
CVE-2017-2453 affects Safari versions before 10.1.
Yes, CVE-2017-2453 affects iOS versions before 10.3.
The impact of CVE-2017-2453 can allow remote attackers to spoof FaceTime prompts, potentially deceiving users.