Login Request a demo
Medium severity · published Apr 2, 2017
CVE-2017-2391
An issue was discovered in certain Apple products
5.3
CVSS
1%
EPSS
No
On KEV
Description
An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keynote · Apple
through 7.0.5; through 3.0.5 · source: NVD
NU
Numbers · Apple
through 4.0.5; through 3.0.5 · source: NVD
PA
Pages · Apple
through 6.0.5; through 3.0.5 · source: NVD
Affected product
KE
Keynote
Apple
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2391
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2391
Third Party Advisory
http://www.securityfocus.com/bid/97126
www.securitytracker.com
http://www.securitytracker.com/id/1038134
www.securitytracker.com
http://www.securitytracker.com/id/1038135
www.securitytracker.com
http://www.securitytracker.com/id/1038136
Vendor Advisory
https://support.apple.com/HT207595
More from Keynote
5.5
CVE-2025-46306
The issue was addressed with improved bounds checks
–
CVE-2015-7033
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or…
–
CVE-2015-7032
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive…
–
CVE-2015-3784
Office Viewer in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in…
–
CVE-2013-5148
Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock implementation, which allows physically proximate attackers…