VDB-107072 · CVE-2017-7137 · HT208103

Apple Xcode up to 8.3.3 ld64 memory corruption

A vulnerability was found in Apple Xcode up to 8.3.3 (Programming Tool Software). It has been rated as critical. Affected by this issue is an unknown function of the component ld64. Upgrading to version 9.0 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10819954	01/14/2021	VulD...	person_name	riusksk	securityfocus.com	01/14/2021	accepted	70
10819953	01/14/2021	VulD...	cvss2_nvd_basescore	6.8	nist.gov	01/14/2021	accepted	90
10819952	01/14/2021	VulD...	sectracker	1039386	cve.mitre.org	01/14/2021	accepted	70
10819951	01/14/2021	VulD...	cve_nvd_summary	An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file.	cve.mitre.org	01/14/2021	accepted	70
7135400	11/19/2019	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	11/19/2019	accepted	100
7135399	11/19/2019	VulD...	securityfocus_date	1505779200 (09/19/2017)	securityfocus.com	11/19/2019	accepted	100
7135396	11/19/2019	VulD...	cve_assigned	1489708800	mitre.org	11/19/2019	accepted	100
7135389	11/19/2019	VulD...	confirm_url	https://support.apple.com/HT208103	support.apple.com	11/19/2019	accepted	100
7135387	11/19/2019	VulD...	person_nickname	riusksk		11/19/2019	accepted	100
7135343	11/19/2019	VulD...	discoverydate	1505779200		11/19/2019	accepted	100
7135421	09/25/2017	VulD...	cvss3_nvd_basescore	7.8	nist.gov	09/25/2017	accepted	90
7135420	09/25/2017	VulD...	0day_days	1		09/25/2017	accepted	90
7135419	09/25/2017	VulD...	cvss3_vuldb_rc	C		09/25/2017	accepted	90
7135418	09/25/2017	VulD...	cvss3_vuldb_rl	O		09/25/2017	accepted	90
7135417	09/25/2017	VulD...	cvss3_vuldb_e	X		09/25/2017	accepted	90
7135416	09/25/2017	VulD...	cvss2_vuldb_rc	C		09/25/2017	accepted	90
7135415	09/25/2017	VulD...	cvss2_vuldb_rl	OF		09/25/2017	accepted	90
7135414	09/25/2017	VulD...	cvss2_vuldb_e	ND		09/25/2017	accepted	90
7135413	09/25/2017	VulD...	seealso	107068 107069 107070 107071 107073 107067 107477		09/25/2017	accepted	100
7135412	09/25/2017	VulD...	openvas_family	General		09/25/2017	accepted	100