First published: Mon Sep 25 2017(Updated: )
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "file" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Credit: product-security@apple.com found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X | <=10.12.6 | |
Apple macOS High Sierra | <10.13 | 10.13 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-7123 is a vulnerability found in certain Apple products that allows remote attackers to cause a denial of service or other unspecified impact.
macOS versions before 10.13 are affected by CVE-2017-7123.
CVE-2017-7123 has a severity rating of 9.8, which is considered critical.
To fix CVE-2017-7123, update to version 5.30 of the 'file' product.
You can find more information about CVE-2017-7123 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/100993), [Apple Support](https://support.apple.com/HT208144).