CVE-2017-6977 — Vulnetix

Try Vulnetix Request Demo

CVE-2017-6977 PUBLISHED CVSS 6.800000190734863 MEDIUM

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.

EPSS 0.24% · 46.8th percentile

Risk Scores

CVSS v2.0

6.800000190734863

EPSS Score

0.24%

46.8th percentile

Affected Products

Vendor	Product	Versions
apple	mac_os_x	0
n/a	n/a	n/a

Timeline

May 16, 2017 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Oct 24, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Jan 2, 2023 EPSS Score

References

https://support.apple.com/en-us/HT207801 advisory
https://support.apple.com/en-us/HT207800 advisory
https://support.apple.com/en-us/HT207805 advisory
https://support.apple.com/en-us/HT207798 advisory
https://support.apple.com/en-us/HT207804 advisory
https://support.apple.com/en-us/HT207797 advisory
https://support.apple.com/en-us/HT207803 advisory
1038484 vdb
https://support.apple.com/HT207797 url
https://nvd.nist.gov/vuln/detail/CVE-2017-6977 advisory

Open in Interactive Console →