CVE-2017-7013 — Out-of-bounds Read in Apple Icloud

CWE-125 — Out-of-bounds Read9 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.3%
top 45.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple IcloudApple Iphone OSApple Itunes+3 more
Timeline
PublishedJul 20
Latest updateMay 14

Description

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxml2" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted XML file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶NVDapple/tvos10.2.1
▶NVDapple/icloud6.2.1
▶NVDapple/itunes12.6.1
▶NVDapple/watchos3.2.2
▶NVDapple/mac_os_x10.12.5

🔴Vulnerability Details

2
GHSA
GHSA-cjcf-pw36-x638: An issue was discovered in certain Apple products↗2022-05-14
▶
CVEList
CVE-2017-7013: An issue was discovered in certain Apple products↗2017-07-20
▶

📋Vendor Advisories

6
Apple
CVE-2017-7013: iTunes 12.6.2 for Windows↗2017-07-19
▶
Apple
CVE-2017-7013: iOS 10.3.3↗2017-07-19
▶
Apple
CVE-2017-7013: tvOS 10.2.2↗2017-07-19
▶
Apple
CVE-2017-7013: macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite↗2017-07-19
▶
Apple
CVE-2017-7013: iCloud for Windows 6.2.2↗2017-07-19
▶
CVE-2017-7013 — Out-of-bounds Read in Apple Icloud | cvebase