CVE-2017-7064: Input Validation
First published: Thu Jul 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iTunes for Windows | <=12.6.1 | |
| Microsoft Windows | ||
| Apple Mobile Safari | <=10.1.1 | |
| iOS | <=10.3.2 | |
| Apple iCloud for Windows | <=6.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-7064?
CVE-2017-7064 has been rated as having a high severity due to the potential for attackers to bypass memory-read restrictions.
How do I fix CVE-2017-7064?
To fix CVE-2017-7064, users should update affected Apple software, including iOS, Safari, iCloud, and iTunes to their latest versions.
Which products are affected by CVE-2017-7064?
CVE-2017-7064 affects iOS versions prior to 10.3.3, Safari versions prior to 10.1.2, iCloud for Windows before 6.2.2, and iTunes before 12.6.2.
Can CVE-2017-7064 be exploited remotely?
Yes, CVE-2017-7064 can potentially be exploited remotely, allowing attackers to gain access through vulnerable WebKit components.
What components are involved in CVE-2017-7064?
CVE-2017-7064 involves the WebKit component, which is integral to rendering web content in Apple software.
- agent/type
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple itunes for windows
- version/apple itunes for windows/12.6.1
- vendor/microsoft
- canonical/microsoft windows
- canonical/apple mobile safari
- version/apple mobile safari/10.1.1
- canonical/ios
- version/ios/10.3.2
- canonical/apple icloud for windows
- version/apple icloud for windows/6.2.1