CVE-2017-7106

EUVD-2017-16144
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
applesafari
𝑥
≤ 10.1.2
appleiphone_os
𝑥
≤ 10.3.3
appleicloud
𝑥
≤ 6.9.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/100893
http://www.securitytracker.com/id/1039384
http://www.securitytracker.com/id/1039385
https://support.apple.com/HT208112
https://support.apple.com/HT208116
https://support.apple.com/HT208142
http://www.securityfocus.com/bid/100893
http://www.securitytracker.com/id/1039384
http://www.securitytracker.com/id/1039385
https://support.apple.com/HT208112
https://support.apple.com/HT208116
https://support.apple.com/HT208142