PT-2017-1766

CVE-2017-2427

Publicado

2017-04-02

Atualizado

2017-07-12

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4

Description The issue is related to a buffer overflow on the stack in the Bluetooth component of the operating system, which can be exploited by a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.

Recommendations For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Axis

Sss

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados