2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"7C1766D9-DF3D-4EDC-9DDB-7762815B85C6","versionEndIncluding":"10.3.1","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"7D3C1AE1-D2BB-4964-8B15-E6573216DB2A","versionEndIncluding":"10.12.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"iBooks\" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book."},{"lang":"es","value":"Se descubrió un problema en ciertos productos de Apple. iOS anterior a versión 10.3.2 está afectado. macOS anterior a versión 10.12.5 está afectado. El problema involucra el componente \"iBooks\". Permite a los atacantes remotos desencadenar visitas a direcciones URL arbitrarias por medio de un libro especialmente diseñado."}],"id":"CVE-2017-2497","lastModified":"2026-06-17T01:16:19.463","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-05-22T05:29:00.347","references":[{"source":"product-security@apple.com","url":"http://www.securitytracker.com/id/1038484"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT207797"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT207798"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1038484"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT207797"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT207798"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-601"}],"source":"nvd@nist.gov","type":"Primary"}]}
|