This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2017-2404 | BDVDB-2026-83539 Detail

Description#

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.