CVE-2017-7152

An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
appleiphone_os
𝑥
< 11.2
𝑥
= Vulnerable software versions
References
http://seclists.org/fulldisclosure/2019/Oct/49
http://seclists.org/fulldisclosure/2019/Oct/54
http://seclists.org/fulldisclosure/2019/Oct/56
https://support.apple.com/HT208334
https://support.apple.com/kb/HT210721
https://support.apple.com/kb/HT210722
https://support.apple.com/kb/HT210724
http://seclists.org/fulldisclosure/2019/Oct/49
http://seclists.org/fulldisclosure/2019/Oct/54
http://seclists.org/fulldisclosure/2019/Oct/56
https://support.apple.com/HT208334
https://support.apple.com/kb/HT210721
https://support.apple.com/kb/HT210722
https://support.apple.com/kb/HT210724