CVE-2017-13892 — Apple Macos vulnerability

4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 44.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple MAC OS X
Timeline
PublishedDec 23
Latest updateDec 24

Description

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5apple/macosunspecified — 10.13
▶NVDapple/macos< 10.13.2
▶NVDapple/mac_os_x10.11 — 10.11.6+3

🔴Vulnerability Details

2
GHSA
GHSA-8v53-wr42-2rc6: An issue existed in the handling of Contact sharing↗2021-12-24
▶
CVEList
CVE-2017-13892: An issue existed in the handling of Contact sharing↗2021-12-23
▶

📋Vendor Advisories

1
Apple
CVE-2017-13892: macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan↗2017-12-06
▶
CVE-2017-13892 — Apple Macos vulnerability | cvebase