CVE-2017-2376 (HIGH)

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	iphone_os	<= 10.2.1	—
apple	safari	<= 10.0.3	—
apple	safari	—	—
debian	webkit2gtk	< webkit2gtk 2.16.3-2 (bookworm)	webkit2gtk 2.16.3-2 (bookworm)

Ubuntu

WebKitGTK+ vulnerabilities

vendor_ubuntu·2017-04-10

CVE-2016-9642 WebKitGTK+ vulnerabilities Title: WebKitGTK+ vulnerabilities Summary: Several security issues were fixed in WebKitGTK+. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Instructions: This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK+, such as Epiphany, to make all the necessary changes.

Apple

CVE-2017-2376: Safari 10.1

vendor_apple·2017-03-27·CVSS 7.5

CVE-2017-2376 [HIGH] CVE-2017-2376: Safari 10.1 Apple Security Update: About the security content of Safari 10.1 Product: Safari Version: 10.1 CVE: CVE-2017-2376 Component: Safari Impact: Visiting a malicious website may lead to address bar spoofing Description: A state management issue was addressed by disabling text input until the destination page loads.

Apple

CVE-2017-2376: iOS 10.3

vendor_apple·2017-03-27·CVSS 7.5

CVE-2017-2376 [HIGH] CVE-2017-2376: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2376 Component: Safari Impact: Visiting a malicious website may lead to address bar spoofing Description: A state management issue was addressed by disabling text input until the destination page loads.

Debian

CVE-2017-2376: webkit2gtk - An issue was discovered in certain Apple products. iOS before 10.3 is affected. ...

vendor_debian·2017·CVSS 7.5

CVE-2017-2376 [HIGH] CVE-2017-2376: webkit2gtk - An issue was discovered in certain Apple products. iOS before 10.3 is affected. ... An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page. Scope: local bookworm: resolved (fixed in 2.16.3-2) bullseye: resolved (fixed in 2.16.3-2) forky: resolved (fixed in 2.16.3-2) sid: resolved (fixed in 2.16.3-2) trixie: resolved (fixed in 2.16.3-2)

GHSA

GHSA-gmr6-wj9p-3p28: An issue was discovered in certain Apple products

ghsa_unreviewed·2022-05-13

CVE-2017-2376 [HIGH] GHSA-gmr6-wj9p-3p28: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.

OSV

CVE-2017-2376: An issue was discovered in certain Apple products

osv·2017-04-02·CVSS 7.5

CVE-2017-2376 [HIGH] CVE-2017-2376: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.

CVE-2017-2376: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It…

Affected

CVSS provenance