CVE-2017-7161

HIGH

Safari < 11.0.2 - Remote Code Execution via WebKit Web Inspector

Title source: llm

Description

An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT208324

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3551-1/

Scores

CVSS v3 8.8

EPSS 0.0216

EPSS Percentile 79.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-77

Status published

Products (3)

apple/safari < 11.0.2

canonical/ubuntu_linux 16.04

canonical/ubuntu_linux 17.10

Published Apr 03, 2018

Tracked Since Feb 18, 2026