An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site.
http://www.securityfocus.com/bid/97129
http://www.securitytracker.com/id/1038137
Source: MITRE
Published: 2017-04-02
Updated: 2019-10-03
Type: NVD-CWE-noinfo
Base Score: 5.8
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Impact Score: 4.9
Exploitability Score: 8.6
Severity: MEDIUM
Base Score: 8.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Impact Score: 5.2
Exploitability Score: 2.8
Severity: HIGH