Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

macOS printing feature lets remote attacker run code

CVE-2017-2403 · published 9 years ago
Summary

Versions of macOS earlier than 10.12.4 have a weakness in the printing system. A specially crafted web link that points to a printer can cause the computer to run unwanted programs, potentially giving an attacker control. Update macOS to the latest version or apply Apple’s security update to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple mac_os_x <= 10.12.3
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute ar...
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.8 High
Exploitation
3% chance of attack within 30 days
Type
CWE-134Use of Externally-Controlled Format String
Timeline
Published2 Apr 2017
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-2403 · NVD
Track software like this
Free during beta