CVE-2017-2404

3.3 lowEPSS 1.5%

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2017-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os

References

http://www.securityfocus.com/bid/97138
http://www.securitytracker.com/id/1038139
https://support.apple.com/HT207617
https://www.engadget.com/2017/03/31/apple-fixes-ios-loophole-911-overload/
http://www.securityfocus.com/bid/97138

Check your stack JSON