CVE-2017-2377 — Apple Iphone OS vulnerability

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	iphone_os	<= 10.2.1	—
apple	safari	<= 10.0.3	—
apple	safari	—	—
debian	webkit2gtk	< webkit2gtk 2.14.6-1 (bookworm)	webkit2gtk 2.14.6-1 (bookworm)

Ubuntu

WebKitGTK+ vulnerabilities

vendor_ubuntu·2017-04-10

CVE-2016-9642 WebKitGTK+ vulnerabilities Title: WebKitGTK+ vulnerabilities Summary: Several security issues were fixed in WebKitGTK+. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Instructions: This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK+, such as Epiphany, to make all the necessary changes.

Apple

CVE-2017-2377: Safari 10.1

vendor_apple·2017-03-27·CVSS 7.5

CVE-2017-2377 [HIGH] CVE-2017-2377: Safari 10.1 Apple Security Update: About the security content of Safari 10.1 Product: Safari Version: 10.1 CVE: CVE-2017-2377 Component: WebKit Web Inspector Impact: Closing a window while paused in the debugger may lead to unexpected application termination Description: A memory corruption issue was addressed through improved input validation.

Apple

CVE-2017-2377: iOS 10.3

vendor_apple·2017-03-27·CVSS 7.5

CVE-2017-2377 [HIGH] CVE-2017-2377: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2377 Component: WebKit Web Inspector Impact: Closing a window while paused in the debugger may lead to unexpected application termination Description: A memory corruption issue was addressed through improved input validation.

Debian

CVE-2017-2377: webkit2gtk - An issue was discovered in certain Apple products. iOS before 10.3 is affected. ...

vendor_debian·2017·CVSS 7.5

CVE-2017-2377 [HIGH] CVE-2017-2377: webkit2gtk - An issue was discovered in certain Apple products. iOS before 10.3 is affected. ... An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state. Scope: local bookworm: resolved (fixed in 2.14.6-1) bullseye: resolved (fixed in 2.14.6-1) forky: resolved (fixed in 2.14.6-1) sid: resolved (fixed in 2.14.6-1) trixie: resolved (fixed in 2.14.6-1)

GHSA

GHSA-h362-hqr3-r6vp: An issue was discovered in certain Apple products

ghsa_unreviewed·2022-05-17

CVE-2017-2377 [HIGH] CWE-119 GHSA-h362-hqr3-r6vp: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state.

OSV

CVE-2017-2377: An issue was discovered in certain Apple products

osv·2017-04-02·CVSS 7.5

CVE-2017-2377 [HIGH] CVE-2017-2377: An issue was discovered in certain Apple products An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state.

CVE-2017-2377: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector"…

Affected

CVSS provenance