CVE-2017-2414 — Vulnetix

CVE-2017-2414 PUBLISHED

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016.

EPSS 0.33% · 55.9th percentile

Risk Scores

EPSS Score

0.33%

55.9th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a

Exploit Intelligence

CVE-2017-2388: Null-pointer dereference in IOFireWireFamily. (github-poc)
CVE-2017-2388: Null-pointer dereference in IOFireWireFamily. (github-poc)
CVE-2017-2388: Null-pointer dereference in IOFireWireFamily. (github-poc)
CVE-2017-2388: Null-pointer dereference in IOFireWireFamily. (github-poc)
An implementation of CVE-2016-8740 (github-poc)
An implementation of CVE-2016-8740 (github-poc)
An implementation of CVE-2016-8740 (github-poc)
An implementation of CVE-2016-8740 (github-poc)
Apache HTTP Server 2.4.23 vulnerability study (CVE-2016-8740) (github-poc)
Apache HTTP Server 2.4.23 vulnerability study (CVE-2016-8740) (github-poc)

…and 10 more exploits

Timeline

Mar 28, 2017 CVE Published
Mar 29, 2017 CVE Updated
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
May 2, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

https://support.apple.com/en-us/HT207604 advisory
https://support.apple.com/en-us/HT207607 advisory
https://support.apple.com/en-us/HT207615 advisory
https://support.apple.com/en-us/HT207602 advisory
https://support.apple.com/en-us/HT207600 advisory
https://support.apple.com/en-us/HT207595 advisory
https://support.apple.com/en-us/HT207601 advisory
https://support.apple.com/en-us/HT207617 advisory
https://www.engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload/ url
1038139 vdb
97138 vdb
https://support.apple.com/HT207617 url

Open in Interactive Console →