high8.8Public exploit code
CVE-2017-2491
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 10.0.3 - 'JSC::CachedCall' Use-After-Free2017-05-04 · remote · macos · Verified
Impact
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 10.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98316
- http://www.zerodayinitiative.com/advisories/ZDI-17-321
- https://support.apple.com/en-us/HT207617
- https://www.exploit-db.com/exploits/41964/
- http://www.securityfocus.com/bid/98316
- http://www.zerodayinitiative.com/advisories/ZDI-17-321
- https://support.apple.com/en-us/HT207617
- https://www.exploit-db.com/exploits/41964/