CVE-2017-13797 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-13797 Interim 1 17 2025-04-22T23:42:59Z current 2021-05-30T14:01:34Z 2025-04-22T23:42:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-13797 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 typelib-1_0-WebKit2WebExtension-4_0 webkit2gtk-4_0-injected-bundles webkit2gtk3 webkit2gtk3-devel libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Desktop 12 SP3 libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Desktop 12 SP3 libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Desktop 12 SP3 typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Desktop 12 SP3 typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Desktop 12 SP3 webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Desktop 12 SP3 webkit2gtk3 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 12 SP2 libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 12 SP2 typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 12 SP2 typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 12 SP2 webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 12 SP2 webkit2gtk3 as a component of SUSE Linux Enterprise Server 12 SP2 libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 12 SP3 libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 12 SP3 typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 12 SP3 typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 12 SP3 webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 12 SP3 webkit2gtk3 as a component of SUSE Linux Enterprise Server 12 SP3 libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 12 SP4-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 webkit2gtk3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 webkit2gtk3-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 webkit2gtk3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 webkit2gtk3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 webkit2gtk3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. CVE-2017-13797 SUSE Linux Enterprise Desktop 12 SP3:libjavascriptcoregtk-4_0-18 SUSE Linux Enterprise Desktop 12 SP3:libwebkit2gtk-4_0-37 SUSE Linux Enterprise Desktop 12 SP3:libwebkit2gtk3-lang SUSE Linux Enterprise Desktop 12 SP3:typelib-1_0-JavaScriptCore-4_0 SUSE Linux Enterprise Desktop 12 SP3:typelib-1_0-WebKit2-4_0 SUSE Linux Enterprise Desktop 12 SP3:webkit2gtk-4_0-injected-bundles SUSE Linux Enterprise Desktop 12 SP3:webkit2gtk3 SUSE Linux Enterprise Server 12 SP2:libjavascriptcoregtk-4_0-18 SUSE Linux Enterprise Server 12 SP2:libwebkit2gtk-4_0-37 SUSE Linux Enterprise Server 12 SP2:typelib-1_0-JavaScriptCore-4_0 SUSE Linux Enterprise Server 12 SP2:typelib-1_0-WebKit2-4_0 SUSE Linux Enterprise Server 12 SP2:webkit2gtk-4_0-injected-bundles SUSE Linux Enterprise Server 12 SP2:webkit2gtk3 SUSE Linux Enterprise Server 12 SP3:libjavascriptcoregtk-4_0-18 SUSE Linux Enterprise Server 12 SP3:libwebkit2gtk-4_0-37 SUSE Linux Enterprise Server 12 SP3:typelib-1_0-JavaScriptCore-4_0 SUSE Linux Enterprise Server 12 SP3:typelib-1_0-WebKit2-4_0 SUSE Linux Enterprise Server 12 SP3:webkit2gtk-4_0-injected-bundles SUSE Linux Enterprise Server 12 SP3:webkit2gtk3 SUSE Linux Enterprise Software Development Kit 12 SP2:webkit2gtk3 SUSE Linux Enterprise Software Development Kit 12 SP2:webkit2gtk3-devel SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-WebKit2WebExtension-4_0 SUSE Linux Enterprise Software Development Kit 12 SP3:webkit2gtk3 SUSE Linux Enterprise Software Development Kit 12 SP3:webkit2gtk3-devel SUSE Linux Enterprise Workstation Extension 12 SP2:libwebkit2gtk3-lang SUSE Linux Enterprise Workstation Extension 12 SP2:webkit2gtk3 SUSE Linux Enterprise Workstation Extension 12 SP3:libwebkit2gtk3-lang SUSE Linux Enterprise Workstation Extension 12 SP3:webkit2gtk3 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H