CVE-2017-2495

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (application crash) via a crafted web site that improperly interacts with the history menu.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
appleiphone_os
𝑥
≤ 10.3.1
applesafari
𝑥
≤ 10.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/98474
http://www.securitytracker.com/id/1038487
https://support.apple.com/HT207798
https://support.apple.com/HT207804
http://www.securityfocus.com/bid/98474
http://www.securitytracker.com/id/1038487
https://support.apple.com/HT207798
https://support.apple.com/HT207804