CVE-2020-3897
First published: Tue Mar 24 2020(Updated: )
WebKit. A type confusion issue was addressed with improved memory handling.
Credit: Brendan Draper @6r3nd4n Trend MicroBrendan Draper @6r3nd4n Trend MicroBrendan Draper @6r3nd4n Trend MicroBrendan Draper @6r3nd4n Trend MicroBrendan Draper @6r3nd4n Trend MicroBrendan Draper @6r3nd4n Trend MicroBrendan Draper @6r3nd4n Trend Micro product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple This document describes the security content of tvOS | <13.4 | 13.4 |
| Apple iCloud for Windows | <7.18 | 7.18 |
| Apple Safari | <13.1 | 13.1 |
| Apple iCloud for Windows | <10.9.3 | 10.9.3 |
| Apple iTunes for Windows | <12.10.5 | 12.10.5 |
| Apple watchOS | <6.2 | 6.2 |
| Apple iOS | <13.4 | 13.4 |
| Apple iPadOS | <13.4 | 13.4 |
| redhat/webkitgtk | <2.28.0 | 2.28.0 |
| Apple Icloud Windows | <7.18 | |
| Apple Icloud Windows | >=10.0.0<10.9.3 | |
| Apple Itunes Windows | <12.10.5 | |
| Apple Safari | <13.1 | |
| Apple Ipad Os | <13.4 | |
| Apple iPhone OS | <13.4 | |
| Apple tvOS | <13.4 | |
| Apple watchOS | <6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT211101 (Advisory)
- https://support.apple.com/en-us/HT211102 (Advisory)
- https://support.apple.com/en-us/HT211103 (Advisory)
- https://support.apple.com/en-us/HT211104 (Advisory)
- https://support.apple.com/en-us/HT211105 (Advisory)
- https://support.apple.com/en-us/HT211106 (Advisory)
- https://support.apple.com/en-us/HT211107 (Advisory)
- https://support.apple.com/HT211101
- https://support.apple.com/HT211102
- https://support.apple.com/HT211103
- https://support.apple.com/HT211104
- https://support.apple.com/HT211105
- https://support.apple.com/HT211106
- https://support.apple.com/HT211107
- https://access.redhat.com/security/cve/CVE-2020-3897
- https://webkitgtk.org/security/WSA-2020-0005.html
- https://access.redhat.com/errata/RHSA-2020:4035
- https://access.redhat.com/security/cve/cve-2020-3897
- https://access.redhat.com/errata/RHSA-2020:4451
- https://bugzilla.redhat.com/show_bug.cgi?id=1876468
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2020-9772
- CVE-2020-3917
- CVE-2020-3883
- CVE-2020-9768
- CVE-2020-3919
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3918
- CVE-2020-9787
- CVE-2020-3895
- CVE-2020-3900
- CVE-2020-3894
- CVE-2020-3899
- CVE-2020-3902
- CVE-2020-3901
- CVE-2020-3887
- CVE-2020-9783
- CVE-2020-3897
- CVE-2020-3885
- CVE-2020-9784
- CVE-2020-3913
- CVE-2020-3916
- CVE-2020-3891
- CVE-2020-9770
- CVE-2020-9780
- CVE-2020-9777
- CVE-2020-3890
- CVE-2020-9775
- CVE-2020-9781
- CVE-2020-3888
Frequently Asked Questions
What is CVE-2020-3897?
CVE-2020-3897 is a type confusion issue in WebKit that was addressed with improved memory handling.
Which software versions are affected by CVE-2020-3897?
The affected software versions include Safari 13.1, iOS up to 13.4, iPadOS up to 13.4, watchOS up to 6.2, iCloud for Windows up to 7.18, iTunes for Windows up to 12.10.5, iCloud for Windows up to 10.9.3, and tvOS up to 13.4.
How can I fix the CVE-2020-3897 vulnerability?
To fix the CVE-2020-3897 vulnerability, it is recommended to update the affected software to the latest version provided by Apple.
Where can I find more information about CVE-2020-3897?
You can find more information about CVE-2020-3897 on the Apple support page at the following references: [reference 1](https://support.apple.com/en-us/HT211103), [reference 2](https://support.apple.com/en-us/HT211104), [reference 3](https://support.apple.com/en-us/HT211102).
- collector/apple-support
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/software-canonical-lookup-request
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-3897
- agent/software-canonical-lookup
- agent/event
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple this document describes the security content of tvos
- canonical/apple icloud for windows
- canonical/apple safari
- canonical/apple itunes for windows
- canonical/apple watchos
- canonical/apple ios
- canonical/apple ipados
- package-manager/redhat
- canonical/apple icloud windows
- version/apple icloud windows/10.0.0
- canonical/apple itunes windows
- canonical/apple ipad os
- canonical/apple iphone os
- canonical/apple tvos