CVE-2017-7109 | BDVDB-2026-92129 Detail

Description#

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via crafted web content that incorrectly interacts with the Application Cache policy.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/101005
https://support.apple.com/HT208141
http://www.securitytracker.com/id/1039384
https://support.apple.com/HT208142
https://support.apple.com/HT208113
https://support.apple.com/HT208112
http://www.securitytracker.com/id/1039428
https://support.apple.com/HT208116

Exploit#

No public exploit known

History#

Version 12017-10-23Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.