CVE-2017-2423 in iOSinfo

Summary

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

12/01/2016

Disclosure

04/01/2017

Entries

2: VDB-98772

CPE

ready

Exploit

Download

CVSS

7.7

EPSS

0.00292

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!