The version of Apple iOS running on the mobile device is prior to 10.2.1. It is, therefore, affected by multiple vulnerabilities in multiple components, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user. The affected components are as follows :

  - Auto Unlock
  - Contacts
  - Kernel
  - libarchive
  - WebKit
  - WiFi

モバイルデバイスで実行中のApple iOSのバージョンは、10.2.1より前です。このため、複数のコンポーネントで多数の脆弱性による影響を受けることになります。その大部分はリモートコードの実行の脆弱性です。認証されていないリモートの攻撃者がこれらのリモートでコードが実行される脆弱性を悪用し、特別に細工されたWebサイトにユーザーを誘導し、カレントユーザーのコンテキストで任意のコードを実行する可能性があります。影響を受けるコンポーネントは次のとおりです。

  - 自動ロック解除
  - 連絡先
  - Kernel
  - libarchive
  - WebKit
  - Wi-Fi

移动设备上运行的 Apple iOS 版本低于 10.2.1。因而多个组件会受到多个漏洞的影响，其中大部分是远程代码执行漏洞。未经身份验证的远程攻击者可利用这些远程代码执行漏洞，诱使用户访问特制的网站，从而导致在当前用户环境中执行任意代码。受影响的组件如下：

  - 自动解锁
  - 通讯录
  - 内核
  - libarchive
  - WebKit
  - WiFi

行動裝置上執行的 Apple iOS 版本比 10.2.1 舊。因此會受到多個元件中的多個弱點影響，其中大多數是遠端程式碼執行弱點。未經驗證的遠端攻擊者可惡意利用這些遠端程式碼執行弱點，誘騙使用者造訪特製的網站，進而導致在目前使用者的內容中執行任意程式碼。受影響的元件如下：

  - 自動解鎖
  - 通訊錄
  - Kernel
  - libarchive
  - WebKit
  - Wi-Fi

The version of iOS running on the mobile device is prior to 10.2.1, and is affected by multiple vulnerabilities :

 - A prototype access flaw exists that is triggered when handling exceptions. With specially crafted web content, a context-dependent attacker may exfiltrate cross-origin data. (CVE-2017-2350)
 - A flaw exists in WiFi that is triggered when handling user input. This may allow a physically present attacker to bypass the lock and briefly access the home screen. (CVE-2017-2351)
 - A logic flaw exists related to state management in Auto Unlock. This may allow a physically present attacker to potentially unlock a watch when it is off the user's wrist. (CVE-2017-2352)
 - A type confusion flaw exists that is triggered as input is not properly validated when handling 'SearchInputType' objects. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2017-2354)
 - An unspecified memory initialization flaw exists that may allow a context-dependent attacker to potentially execute arbitrary code. No further details have been provided. (CVE-2017-2355)
 - A flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2017-2356, CVE-2017-2362, CVE-2017-2366, CVE-2017-2369, CVE-2017-2373)
 - A use-after-free error exists in the 'host_self_trap' mach trap. This may allow a local attacker to dereference already freed memory and gain elevated privileges. (CVE-2017-2360)
 - A flaw exists that is triggered as input is not properly validated when handling page loading. This may allow a context-dependent attacker to exfiltrate cross-origin data. (CVE-2017-2363, CVE-2017-2364)
 - A flaw exists that is triggered as input is not properly validated when handling variables. This may allow a context-dependent attacker to exfiltrate cross-origin data. (CVE-2017-2365)
 - A flaw exists in Contacts that is triggered as input is not properly validated during the handling of a specially crafted contact card. This may allow a context-dependent attacker to crash the system. (CVE-2017-2368)
 - An overflow condition exists in the 'mach_voucher_extract_attr_recipe_trap()' function that is triggered as certain input is not properly validated. This may allow a local attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2017-2370)
 - An unspecified flaw exists that may allow a context-dependent attacker to bypass popup restrictions via a specially crafted website. No further details have been provided. (CVE-2017-2371)

ID	名稱	產品	系列	已發布	已更新	嚴重性
96730	Apple iOS < 10.2.1 Multiple Vulnerabilities	Nessus	Mobile Devices	2017/1/24	2024/5/20	high
96730	Apple iOS < 10.2.1の複数の脆弱性	Nessus	Mobile Devices	2017/1/24	2024/5/20	high
96730	Apple iOS < 10.2.1 多个漏洞	Nessus	Mobile Devices	2017/1/24	2024/5/20	high
96730	Apple iOS < 10.2.1 多個弱點	Nessus	Mobile Devices	2017/1/24	2024/5/20	high
9929	Apple iOS < 10.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2017/1/30	2019/3/6	high

偵測

搜尋 Plugin

high

high

high

high

high