Sploitus

CVE-2017-2457

4 known exploits for CVE-2017-2457

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Affected products
Safari, Ubuntu, Webkit, Ios
Apple Safari
≤ 10.0.3
Apple Iphone Os
≤ 10.2.1
Fix
Available
CVSS 3.0
8.8 HIGH
EPSS
6.3% (93th percentile)
Weakness
CWE-119
NVD status
Modified
Published
2017-04-02
CVE-2017-2457 at NVD
Authoritative description, scoring and affected products

4 known exploits for CVE-2017-2457

Proof-of-concept code and exploit modules indexed by Sploitus

WebKit constructJSReadableStreamDefaultReader Type Confusion
2017-04-09 Google Security ResearchPACKETSTORM
Apple WebKit 10.0.2(12602.3.12.0.1, r210800) - constructJSReadableStreamDefaultReader Type Confusion
2017-04-05 Google Security ResearchZDT
Apple WebKit 10.0.2 (12602.3.12.0.1_ r210800) - 'constructJSReadableStreamDefaultReader' Type Confusion
2017-04-04 Google Security ResearchEXPLOITDB
WebKit: Type confusion in constructJSReadableStreamDefaultReader(CVE-2017-2457)
2017-04-04 RootSEEBUG