First published: Tue Sep 19 2017(Updated: )
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted Office document.
Credit: Australian Cyber Security Centre – Australian Signals Directorate Australian Cyber Security Centre – Australian Signals Directorate Australian Cyber Security Centre – Australian Signals Directorate product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X | <=10.13.0 | |
Apple iOS | <11 | 11 |
Apple macOS | <10.13 | 10.13 |
Apple macOS | <10.13.1 | 10.13.1 |
Apple Sierra | ||
Apple El Capitan |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-7132 is a vulnerability that affects certain Apple products, including macOS and iOS, allowing remote attackers to execute arbitrary code or cause a denial of service through a crafted Office document.
CVE-2017-7132 affects macOS versions before 10.13.1, macOS High Sierra versions before 10.13, Sierra, El Capitan, and iOS versions before 11.
CVE-2017-7132 has a severity rating of 7.8 out of 10, indicating a high severity.
To fix CVE-2017-7132, Apple users should update their affected products to the latest version available, such as macOS 10.13.1 or iOS 11.
More information about CVE-2017-7132 can be found on the Apple support page: https://support.apple.com/en-us/HT208221