Lucene search

AppleCVE-2017-2374

HistoryFeb 20, 2017 - 8:59 a.m.

CVE-2017-2374

2017-02-2008:59:05

CWE-119

apple

web.nvd.nist.gov

apple

garageband

cve-2017-2374

security

vulnerability

remote attack

arbitrary code execution

denial of service

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.012

Percentile

85.0%

JSON

An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the “Projects” component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted GarageBand project file.

Affected configurations

Nvd

Node

applegaragebandRange≤10.1.5

VendorProductVersionCPE
applegarageband*cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	garageband	*	cpe:2.3:a:apple:garageband::::::::

References

www.securityfocus.com/bid/96171

www.securitytracker.com/id/1037868

www.talosintelligence.com/reports/TALOS-2017-0275/

support.apple.com/HT207518

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.012

Percentile

85.0%

JSON

Related for CVE-2017-2374