CVE-2017-2450 in tvOSinfo

Summary

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

12/01/2016

Disclosure

04/01/2017

CPE

ready

CVSS

5.7

EPSS

0.00614

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!