Security Alert (A17-04-01): Vulnerability in Apple iOS

Description:

Apple has released software update fixing one vulnerability in iOS versions prior to iOS 10.3.1. This vulnerability is caused by the stack buffer overflow flaw. An attacker within WiFi range may be able to execute arbitrary code on an affected system.

Affected Systems:

• iPhone 5 and later
• iPad 4 and later
• iPod touch (6th generation) and later

Impact:

A successful attack could lead to arbitrary code execution.

Recommendation:

The product vendor has released iOS 10.3.1 to address the issues. Users can obtain the updates by using the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

https://support.apple.com/en-us/HT207688
https://www.hkcert.org/my_url/en/alert/17040501
https://www.us-cert.gov/ncas/current-activity/2017/04/03/Apple-Releases-Security-Update-iOS
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6975