1. Home
  2. CVE Database
  3. CVE-2017-13801
LOW · 3.3

CVE-2017-13801

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Dictionary Widget" component. It allows attackers to read local files if pasted text is use...

Vulnerability Description

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Dictionary Widget" component. It allows attackers to read local files if pasted text is used in a search.

CVSS Score

3.3

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AppleMac Os X<= 10.13.0

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2017-13801?

CVE-2017-13801 is a vulnerability with a CVSS score of 3.3 (LOW). An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Dictionary Widget" component. It allows attackers to read local files if pasted text is use...

How severe is CVE-2017-13801?

CVE-2017-13801 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-13801?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X.