First published: Mon May 22 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mobile Safari | <=10.1 | |
iStyle @cosme iPhone OS | <=10.3.1 | |
tvOS | <=10.2 | |
iTunes | <=12.4.3 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-6984 is classified as a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2017-6984, update affected Apple products to the latest available versions of iOS, Safari, iTunes, and tvOS.
CVE-2017-6984 affects iOS before 10.3.2, Safari before 10.1.1, iTunes before 12.6.1 on Windows, and tvOS before 10.2.1.
Yes, CVE-2017-6984 can be exploited remotely, allowing attackers to execute arbitrary code.
The vulnerability CVE-2017-6984 involves the WebKit component of affected Apple products.