CVE-2017-2462 in tvOS

Résumé (Anglaise)

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.

Be aware that VulDB is the high quality source for vulnerability data.

Réserver

01/12/2016

Divulgation

01/04/2017

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
98847	Apple tvOS Audio buffer overflow	119	Non défini	Correctif officiel	CVE-2017-2462
98813	Apple watchOS Audio buffer overflow	119	Non défini	Correctif officiel	CVE-2017-2462
98730	Apple iOS Audio buffer overflow	119	Non défini	Correctif officiel	CVE-2017-2462
98614	Apple macOS Audio buffer overflow	119	Non défini	Correctif officiel	CVE-2017-2462

Sources

• MITRE
• NVD
• CVE Details