VDB-107071 · CVE-2017-7136 · HT208103

Apple Xcode up to 8.3.3 ld64 memory corruption

A vulnerability was found in Apple Xcode up to 8.3.3 (Programming Tool Software). It has been declared as critical. Affected by this vulnerability is some unknown processing of the component ld64. Upgrading to version 9.0 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10819950	01/14/2021	VulD...	person_name	riusksk	securityfocus.com	01/14/2021	accepted	70
10819949	01/14/2021	VulD...	cvss2_nvd_basescore	6.8	nist.gov	01/14/2021	accepted	90
10819948	01/14/2021	VulD...	sectracker	1039386	cve.mitre.org	01/14/2021	accepted	70
10819947	01/14/2021	VulD...	cve_nvd_summary	An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file.	cve.mitre.org	01/14/2021	accepted	70
7135316	11/19/2019	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	11/19/2019	accepted	100
7135315	11/19/2019	VulD...	securityfocus_date	1505779200 (09/19/2017)	securityfocus.com	11/19/2019	accepted	100
7135312	11/19/2019	VulD...	cve_assigned	1489708800	mitre.org	11/19/2019	accepted	100
7135305	11/19/2019	VulD...	confirm_url	https://support.apple.com/HT208103	support.apple.com	11/19/2019	accepted	100
7135303	11/19/2019	VulD...	person_nickname	riusksk		11/19/2019	accepted	100
7135259	11/19/2019	VulD...	discoverydate	1505779200		11/19/2019	accepted	100
7135337	09/25/2017	VulD...	cvss3_nvd_basescore	7.8	nist.gov	09/25/2017	accepted	90
7135336	09/25/2017	VulD...	0day_days	1		09/25/2017	accepted	90
7135335	09/25/2017	VulD...	cvss3_vuldb_rc	C		09/25/2017	accepted	90
7135334	09/25/2017	VulD...	cvss3_vuldb_rl	O		09/25/2017	accepted	90
7135333	09/25/2017	VulD...	cvss3_vuldb_e	X		09/25/2017	accepted	90
7135332	09/25/2017	VulD...	cvss2_vuldb_rc	C		09/25/2017	accepted	90
7135331	09/25/2017	VulD...	cvss2_vuldb_rl	OF		09/25/2017	accepted	90
7135330	09/25/2017	VulD...	cvss2_vuldb_e	ND		09/25/2017	accepted	90
7135329	09/25/2017	VulD...	seealso	107068 107069 107070 107072 107073 107067 107477		09/25/2017	accepted	100
7135328	09/25/2017	VulD...	openvas_family	General		09/25/2017	accepted	100