CVE-2017-7106 — Improper Input Validation in Apple Icloud

CWE-20 — Improper Input Validation6 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.9%
top 24.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple IcloudApple Iphone OSApple Safari
Timeline
PublishedOct 23
Latest updateMay 17

Description

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶NVDapple/icloud6.9.1
▶NVDapple/safari10.1.2
▶NVDapple/iphone_os10.3.3

🔴Vulnerability Details

2
GHSA
GHSA-89v2-rphr-p2pf: An issue was discovered in certain Apple products↗2022-05-17
▶
CVEList
CVE-2017-7106: An issue was discovered in certain Apple products↗2017-10-23
▶

📋Vendor Advisories

3
Apple
CVE-2017-7106: iCloud for Windows 7.0↗2017-09-25
▶
Apple
CVE-2017-7106: Safari 11↗2017-09-19
▶
Apple
CVE-2017-7106: iOS 11↗2017-09-19
▶
CVE-2017-7106 — Improper Input Validation in Apple | cvebase