CVE-2017-2425

Description

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "SecurityFoundation" component. A double free vulnerability allows remote attackers to execute arbitrary code via a crafted certificate.

References

https://support.apple.com/HT207615

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-11608

http://www.securitytracker.com/id/1038138

http://www.securityfocus.com/bid/97140

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS