An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/97137 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1038138 | |
https://support.apple.com/HT207601 | Vendor Advisory |
https://support.apple.com/HT207602 | Vendor Advisory |
https://support.apple.com/HT207615 | Vendor Advisory |
https://support.apple.com/HT207617 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-04-02 01:59
Updated : 2024-02-28 15:44
NVD link : CVE-2017-2450
Mitre link : CVE-2017-2450
CVE.ORG link : CVE-2017-2450
JSON object : View
Products Affected
apple
- watchos
- mac_os_x
- iphone_os
- tvos
CWE
CWE-125
Out-of-bounds Read