CVE-2017-7055
Published: 20 July 2017
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Priority
CVSS 3 base score: 8.8
Status
Package | Release | Status |
---|---|---|
qtwebkit Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
Ubuntu 21.04 (Hirsute Hippo) |
Does not exist
|
|
Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
qtwebkit-opensource-src Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
Ubuntu 21.04 (Hirsute Hippo) |
Needs triage
|
|
Ubuntu 20.10 (Groovy Gorilla) |
Needs triage
|
|
Ubuntu 20.04 LTS (Focal Fossa) |
Needs triage
|
|
Ubuntu 18.04 LTS (Bionic Beaver) |
Needs triage
|
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Needs triage
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was needs-triage)
|
|
qtwebkit-source Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
Ubuntu 21.04 (Hirsute Hippo) |
Does not exist
|
|
Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
Ubuntu 18.04 LTS (Bionic Beaver) |
Needs triage
|
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Needs triage
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was needs-triage)
|
|
webkit2gtk Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.16.6)
|
Ubuntu 21.04 (Hirsute Hippo) |
Not vulnerable
(2.16.6-1)
|
|
Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(2.16.6-1)
|
|
Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(2.16.6-1)
|
|
Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(2.16.6-1)
|
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(2.16.6-0ubuntu0.16.04.1)
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
webkitgtk Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
Ubuntu 21.04 (Hirsute Hippo) |
Does not exist
|
|
Ubuntu 20.10 (Groovy Gorilla) |
Does not exist
|
|
Ubuntu 20.04 LTS (Focal Fossa) |
Does not exist
|
|
Ubuntu 18.04 LTS (Bionic Beaver) |
Needs triage
|
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Needs triage
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was needs-triage)
|
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7055
- http://www.securitytracker.com/id/1038950
- https://support.apple.com/HT207921
- https://support.apple.com/HT207923
- https://support.apple.com/HT207924
- https://support.apple.com/HT207927
- https://support.apple.com/HT207928
- https://webkitgtk.org/security/WSA-2017-0006.html
- https://usn.ubuntu.com/usn/usn-3376-1
- NVD
- Launchpad
- Debian