Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Philipp Eckel

Researcher fromThoughtWorks
#50441of 56,334
5.3Total CVSS
Vulnerabilities · 1
PT-2017-15406
5.3
2017-04-02
Apple · Pages · CVE-2017-2391
**Name of the Vulnerable Software and Affected Versions** Pages versions prior to 6.1 on macOS Pages versions prior to 3.1 on iOS Numbers versions prior to 4.1 on macOS Numbers versions prior to 3.1 on iOS Keynote versions prior to 7.1 on macOS Keynote versions prior to 3.1 on iOS **Description** The issue involves the "Export" component and allows users to bypass iWork PDF password protection. This is achieved by leveraging the use of 40-bit RC4, which is considered insecure. **Recommendations** For Pages on macOS, update to version 6.1 or later. For Pages on iOS, update to version 3.1 or later. For Numbers on macOS, update to version 4.1 or later. For Numbers on iOS, update to version 3.1 or later. For Keynote on macOS, update to version 7.1 or later. For Keynote on iOS, update to version 3.1 or later.