Apple iOS and macOS Multiple Security Vulnerabilities

Bugtraq ID:	98472
Class:	Input Validation Error
CVE:	CVE-2017-2497 CVE-2017-6981 CVE-2017-6983 CVE-2017-6991
Remote:	Yes
Local:	No
Published:	May 15 2017 12:00AM
Updated:	May 15 2017 12:00AM
Credit:	Jun Kokatsu (@shhnjk), evi1m0 of YSRC (sec.ly.com), and Chaitin Security Research Lab (@ChaitinTech)
Vulnerable:	Apple macOS 10.12.4 Apple macOS 10.12.3 Apple macOS 10.12.2 Apple macOS 10.12.1 Apple macOS 10.12 Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 5 0 Apple iOS 4 0 Apple iOS 3 0 Apple iOS 10.2.1 Apple iOS 10.0.1 Apple iOS 9.3.4 Apple iOS 9.3.3 Apple iOS 9.3.2 Apple iOS 9.3.1 Apple iOS 9.2.1 Apple iOS 9.0.2 Apple iOS 9.0.1 Apple iOS 8.4.1 Apple iOS 7.2 Apple iOS 7.0.6 Apple iOS 7.0.5 Apple iOS 7.0.3 Apple iOS 7.0.2 Apple iOS 7.0.1 Apple iOS 6.3.1 Apple iOS 6.1.6 Apple iOS 6.1.4 Apple iOS 6.1.3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 9.3.5 Apple iOS 9.3 Apple iOS 9.2 Apple iOS 9.1 Apple iOS 9 Apple iOS 8.4 Apple iOS 8.3 Apple iOS 8.2 Apple iOS 8.1.3 Apple iOS 8.1.2 Apple iOS 8.1.1 Apple iOS 8.1 Apple iOS 8 Apple iOS 7.1.2 Apple iOS 7.1.1 Apple iOS 7.1 Apple iOS 7.0.4 Apple iOS 7 Apple iOS 6.1 Apple iOS 6.0.2 Apple iOS 6.0.1 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 Apple iOS 10.3.1 Apple iOS 10.3 Apple iOS 10.2 Apple iOS 10.1 Apple iOS 10
Not Vulnerable:	Apple macOS 10.12.5 Apple iOS 10.3.2

Apple iOS and macOS Multiple Security Vulnerabilities

Apple iOS and macOS are prone to multiple security vulnerabilities.

An attacker can exploit these issues to perform unauthorized actions and execute arbitrary code with root privileges. Failed exploit attempts will likely cause a denial-of-service condition.

Apple iOS and macOS Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iOS and macOS Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple iOS and macOS Multiple Security Vulnerabilities

References:

• Apple Home Page (Apple)
  
• Apple iOS Homepage (Apple)