CVE-2017-2497 is a medium-severity vulnerability affecting Apple iOS before 10.3.2 and macOS before 10.12.5, specifically within the iBooks component. It allows remote attackers to force users to visit arbitrary URLs through a specially crafted book. The attack requires user interaction, has low impact on confidentiality and integrity, and is not known to be actively exploited, nor is public exploit code or significant community discussion available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.3.1CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | ||
<= 10.12.4CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.