CVE-2017-7023: Buffer Overflow
First published: Thu Jul 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mobile Safari | <=10.1.1 | |
| iStyle @cosme iPhone OS | <=10.3.2 | |
| tvOS | <=10.2.1 | |
| Apple iCloud for Windows | <=6.2.1 | |
| Microsoft Windows | ||
| Apple iTunes for Windows | <=12.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-7023?
CVE-2017-7023 is considered to have high severity as it allows attackers to execute arbitrary code in a privileged context.
How do I fix CVE-2017-7023?
To fix CVE-2017-7023, update your affected Apple products to the latest version available, specifically iOS 10.3.3, macOS 10.12.6, tvOS 10.2.2, or watchOS 3.2.3.
Which Apple products are affected by CVE-2017-7023?
CVE-2017-7023 affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.
Can CVE-2017-7023 be exploited remotely?
Yes, CVE-2017-7023 can be exploited remotely, allowing attackers to gain unauthorized access to the system.
What components are involved in CVE-2017-7023?
CVE-2017-7023 involves the Kernel component of the affected Apple products.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple mobile safari
- version/apple mobile safari/10.1.1
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/10.3.2
- canonical/tvos
- version/tvos/10.2.1
- canonical/apple icloud for windows
- version/apple icloud for windows/6.2.1
- vendor/microsoft
- canonical/microsoft windows
- canonical/apple itunes for windows
- version/apple itunes for windows/12.6.1