CVE-2017-2499 in Safari

Summary

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service (memory corruption) via a crafted app.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

12/01/2016

Disclosure

05/22/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
101355	Apple Safari WebKit Web Inspector memory corruption	119	Not defined	Official fix	CVE-2017-2499
101317	Apple tvOS WebKit Web Inspector memory corruption	119	Not defined	Official fix	CVE-2017-2499
101294	Apple iOS WebKit Web Inspector memory corruption	119	Not defined	Official fix	CVE-2017-2499

Sources

• MITRE
• NVD
• CVE Details