PT-2017-15402

CVE-2017-2376

Published

2017-04-02

Updated

2019-10-03

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10.3 Apple Safari versions prior to 10.1

Description The issue involves the Safari component and allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.

Recommendations For iOS versions prior to 10.3, update to version 10.3 or later. For Safari versions prior to 10.1, update to version 10.1 or later.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

CVE-2017-2376