CVE-2017-7156: Buffer Overflow
First published: Sat Dec 02 2017(Updated: )
WebKit. Multiple memory corruption issues were addressed with improved memory handling.
Credit: Yuan Deng Antan anonymous researcher Jeonghoon Shin Tencent Keen Security Lab @keen_lab Trend MicroRichard Zhu (fluorescence) Trend Micro product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| tvOS | <11.2 | 11.2 |
| Apple iOS, iPadOS, and watchOS | <11.2 | 11.2 |
| Apple Mobile Safari | <11.0.2 | |
| iStyle @cosme iPhone OS | <11.2 | |
| tvOS | <11.2 | |
| iCloud Drive | <7.2 | |
| iTunes | <12.7.2 | |
| Microsoft Windows | ||
| WebKit | ||
| iTunes | <12.7.2 | 12.7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT208326 (Advisory)
- https://support.apple.com/en-us/HT208327 (Advisory)
- https://support.apple.com/en-us/HT208334 (Advisory)
- http://www.securityfocus.com/bid/102181
- http://www.securitytracker.com/id/1040012
- http://www.securitytracker.com/id/1040013
- https://security.gentoo.org/glsa/201801-09
- https://support.apple.com/HT208324
- https://support.apple.com/HT208326
- https://support.apple.com/HT208327
- https://support.apple.com/HT208328
- https://support.apple.com/HT208334
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2017-7164
- CVE-2017-13905
- CVE-2017-7172
- CVE-2017-7171
- CVE-2017-7151
- CVE-2017-7162
- CVE-2017-13861
- CVE-2017-13904
- CVE-2017-5754
- CVE-2017-13862
- CVE-2017-13867
- CVE-2017-13876
- CVE-2017-7173
- CVE-2017-13855
- CVE-2017-13865
- CVE-2017-13868
- CVE-2017-13869
- CVE-2017-7154
- CVE-2017-13885
- CVE-2017-7165
- CVE-2017-13884
- CVE-2017-7153
- CVE-2017-7156
- CVE-2017-7157
- CVE-2017-13856
- CVE-2017-13870
- CVE-2017-7160
- CVE-2017-13866
- CVE-2017-13080
- CVE-2017-2411
- CVE-2017-13847
- CVE-2017-13879
- CVE-2017-13880
- CVE-2017-13874
- CVE-2017-13860
- CVE-2017-7152
- CVE-2017-13888
- CVE-2017-13891
- CVE-2017-13864
- CVE-2017-15422
Frequently Asked Questions
What is the severity of CVE-2017-7156?
The severity of CVE-2017-7156 is high with a severity value of 8.8.
Which Apple products are affected by CVE-2017-7156?
iOS before 11.2, Safari before 11.0.2, iCloud before 7.2 on Windows, iTunes before 12.7.2 on Windows, and tvOS before 11.2 are affected by CVE-2017-7156.
What is the component involved in CVE-2017-7156?
The component involved in CVE-2017-7156 is WebKit.
Are Windows systems vulnerable to CVE-2017-7156?
No, Windows systems are not vulnerable to CVE-2017-7156.
How can I fix CVE-2017-7156?
Update your iOS to version 11.2 or later, Safari to version 11.0.2 or later, iCloud on Windows to version 7.2 or later, iTunes on Windows to version 12.7.2 or later, and tvOS to version 11.2 or later to fix CVE-2017-7156.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- collector/apple-support
- alias/CVE-2017-7157
- alias/CVE-2017-13856
- alias/CVE-2017-13870
- alias/CVE-2017-7160
- alias/CVE-2017-13866
- agent/software-canonical-lookup-request
- agent/author
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- vendor/apple
- canonical/tvos
- canonical/apple ios, ipados, and watchos
- canonical/apple mobile safari
- canonical/istyle @cosme iphone os
- canonical/icloud drive
- canonical/itunes
- vendor/microsoft
- canonical/microsoft windows
- canonical/webkit