CVE-2017-6977
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.12.5, involving the 'Speech Framework' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service via a crafted app.
Risk Assessment
Organizations may be exposed to attacks that could lead to unauthorized access or disruption of service. Specifically, these attacks could result in data loss or information leakage.
Recommendation
It is recommended to update macOS to version 10.12.5 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Speech Framework
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.