CVE-2017-7123

CRITICAL

macOS < 10.12.6 - Denial of Service via file Product Input Validation

Title source: llm

Description

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "file" product. Versions before 5.30 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100993

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT208144

Scores

CVSS v3 9.8

EPSS 0.0135

EPSS Percentile 68.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (1)

apple/mac_os_x < 10.12.6

Published Oct 23, 2017

Tracked Since Feb 18, 2026