Bug 1075775 – VUL-0: CVE-2017-7160: webkitgtk3: An issue was discovered in certain Apple products. iOS before 11.2 is affected.Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected.iTunes before 12.7.2 on Windows is affected. tvOS

Bug 1075775 - (CVE-2017-7160) VUL-0: CVE-2017-7160: webkitgtk3: An issue was discovered in certain Apple products. iOS before 11.2 is affected.Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected.iTunes before 12.7.2 on Windows is affected. tvOS

(CVE-2017-7160)
Summary:	VUL-0: CVE-2017-7160: webkitgtk3: An issue was discovered in certain Apple pr...

Status:	RESOLVED DUPLICATE of bug 1077535

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Major
Target Milestone:	---
Assigned To:	E-mail List
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/197310/
Whiteboard:	CVSSv3:NVD:CVE-2017-7160:8.8:(AV:N/AC...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2018-01-12 10:17 UTC by Victor Pereira
Modified:	2019-05-01 14:06 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Victor Pereira 2018-01-12 10:17:32 UTC

CVE-2017-7160

An issue was discovered in certain Apple products. iOS before 11.2 is affected.
Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected.
iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The
issue involves the "WebKit" component. It allows remote attackers to execute
arbitrary code or cause a denial of service (memory corruption and application
crash) via a crafted web site.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7160
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7160
http://www.cvedetails.com/cve/CVE-2017-7160/

Comment 1 Karol Babioch 2018-01-26 16:26:51 UTC

Part of WSA-2018-0002

*** This bug has been marked as a duplicate of bug 1077535 ***

Comment 2 Swamp Workflow Management 2018-10-24 16:43:39 UTC

SUSE-SU-2018:3387-1: An update that fixes 40 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1075775,1077535,1079512,1088182,1088932,1092278,1092279,1092280,1095611,1096060,1096061,1097693,1101999,1102530,1104169
CVE References: CVE-2017-13884,CVE-2017-13885,CVE-2017-7153,CVE-2017-7160,CVE-2017-7161,CVE-2017-7165,CVE-2018-11646,CVE-2018-11712,CVE-2018-11713,CVE-2018-12911,CVE-2018-4088,CVE-2018-4096,CVE-2018-4101,CVE-2018-4113,CVE-2018-4114,CVE-2018-4117,CVE-2018-4118,CVE-2018-4119,CVE-2018-4120,CVE-2018-4121,CVE-2018-4122,CVE-2018-4125,CVE-2018-4127,CVE-2018-4128,CVE-2018-4129,CVE-2018-4133,CVE-2018-4146,CVE-2018-4161,CVE-2018-4162,CVE-2018-4163,CVE-2018-4165,CVE-2018-4190,CVE-2018-4199,CVE-2018-4200,CVE-2018-4204,CVE-2018-4218,CVE-2018-4222,CVE-2018-4232,CVE-2018-4233,CVE-2018-4246
Sources used:
SUSE Linux Enterprise Workstation Extension 12-SP3 (src):    webkit2gtk3-2.20.3-2.23.8
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    webkit2gtk3-2.20.3-2.23.8
SUSE Linux Enterprise Server 12-SP3 (src):    webkit2gtk3-2.20.3-2.23.8
SUSE Linux Enterprise Desktop 12-SP3 (src):    webkit2gtk3-2.20.3-2.23.8

Comment 3 Swamp Workflow Management 2018-10-25 22:12:18 UTC

openSUSE-SU-2018:3473-1: An update that fixes 40 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1075775,1077535,1079512,1088182,1088932,1092278,1092279,1092280,1095611,1096060,1096061,1097693,1101999,1102530,1104169
CVE References: CVE-2017-13884,CVE-2017-13885,CVE-2017-7153,CVE-2017-7160,CVE-2017-7161,CVE-2017-7165,CVE-2018-11646,CVE-2018-11712,CVE-2018-11713,CVE-2018-12911,CVE-2018-4088,CVE-2018-4096,CVE-2018-4101,CVE-2018-4113,CVE-2018-4114,CVE-2018-4117,CVE-2018-4118,CVE-2018-4119,CVE-2018-4120,CVE-2018-4121,CVE-2018-4122,CVE-2018-4125,CVE-2018-4127,CVE-2018-4128,CVE-2018-4129,CVE-2018-4133,CVE-2018-4146,CVE-2018-4161,CVE-2018-4162,CVE-2018-4163,CVE-2018-4165,CVE-2018-4190,CVE-2018-4199,CVE-2018-4200,CVE-2018-4204,CVE-2018-4218,CVE-2018-4222,CVE-2018-4232,CVE-2018-4233,CVE-2018-4246
Sources used:
openSUSE Leap 42.3 (src):    webkit2gtk3-2.20.3-11.1