CVE-2017-2453

EUVD-2017-11636
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web site.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
Affected Products (NVD)
VendorProductVersion
applesafari
𝑥
≤ 10.0.3
appleiphone_os
𝑥
≤ 10.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/97129
http://www.securitytracker.com/id/1038137
https://support.apple.com/HT207600
https://support.apple.com/HT207617
http://www.securityfocus.com/bid/97129
http://www.securitytracker.com/id/1038137
https://support.apple.com/HT207600
https://support.apple.com/HT207617