CVE Catalog

CVE-2017-2523

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered in certain Apple products related to the 'Foundation' component. It affects iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2, allowing remote attackers to execute arbitrary code or cause a denial of service.

Risk Assessment

Attackers could exploit this vulnerability to execute arbitrary code remotely, potentially leading to serious security implications for systems and user data.

Recommendation

It is recommended to update systems to the latest versions to mitigate this vulnerability and protect against potential attacks.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS