CVE-2017-2495

EUVD-2017-11678
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (application crash) via a crafted web site that improperly interacts with the history menu.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
≤ 10.3.1
applesafari
𝑥
≤ 10.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/98474
http://www.securitytracker.com/id/1038487
https://support.apple.com/HT207798
https://support.apple.com/HT207804
http://www.securityfocus.com/bid/98474
http://www.securitytracker.com/id/1038487
https://support.apple.com/HT207798
https://support.apple.com/HT207804