Tongbo Luo

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.2 Safari versions prior to 10.0.2 iCloud versions prior to 6.1 iTunes versions prior to 12.5.4 **Description** The issue involves the `WebKit` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker using a specially formed web site. **Recommendations** For iOS versions prior to 10.2, update to version 10.2 or later. For Safari versions prior to 10.0.2, update to version 10.0.2 or later. For iCloud versions prior to 6.1, update to version 6.1 or later. For iTunes versions prior to 12.5.4, update to version 12.5.4 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.2 Safari versions prior to 10.0.2 iCloud versions prior to 6.1 iTunes versions prior to 12.5.4 **Description** The issue involves the `WebKit` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker using a specially formed web site. **Recommendations** For iOS versions prior to 10.2, update to version 10.2 or later. For Safari versions prior to 10.0.2, update to version 10.0.2 or later. For iCloud versions prior to 6.1, update to version 6.1 or later. For iTunes versions prior to 12.5.4, update to version 12.5.4 or later.

**Name of the Vulnerable Software and Affected Versions** webkit2 versions prior to 2.14.5 **Description** The webkit2 package had several security issues and other bugs that have been fixed in version 2.14.5. **Recommendations** For versions prior to 2.14.5, update to version 2.14.5 to resolve the security issues.

**Name of the Vulnerable Software and Affected Versions** Apple iTunes versions prior to 12.5.1 Safari versions prior to 10 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iTunes versions prior to 12.5.1, update to version 12.5.1 or later. For Safari versions prior to 10, update to version 10 or later.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK+ versions prior to 2.12.5-0ubuntu0.16.04.1 **Description** A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. **Recommendations** Update the system to the following package versions: gir1.2-javascriptcoregtk-4.0 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37-gtk2 - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-dev - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37 - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-18 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-doc - 2.12.5-0ubuntu0.16.04.1 libjavascriptcoregtk-4.0-bin - 2.12.5-0ubuntu0.16.04.1 gir1.2-webkit2-4.0 - 2.12.5-0ubuntu0.16.04.1 libwebkit2gtk-4.0-dev - 2.12.5-0ubuntu0.16.04.1 Run `sudo pro fix USN-3079-1` to fix the vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS and Safari (affected versions not specified) **Description** The issue is caused by a buffer overflow in the WebKit component. It can be exploited by a remote attacker using a specially crafted website, potentially allowing them to execute arbitrary code or cause a denial of service (memory corruption). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3.2 Apple OS X versions prior to 10.11.5 Apple tvOS versions prior to 9.2.1 Apple watchOS versions prior to 2.2.1 **Description** The issue is caused by a buffer overflow in the OpenGL component. This can be exploited by a remote attacker using a specially crafted website, potentially allowing them to execute arbitrary code or cause a denial of service due to memory corruption. **Recommendations** For Apple iOS versions prior to 9.3.2, update to version 9.3.2 or later. For Apple OS X versions prior to 10.11.5, update to version 10.11.5 or later. For Apple tvOS versions prior to 9.2.1, update to version 9.2.1 or later. For Apple watchOS versions prior to 2.2.1, update to version 2.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 **Description** The issue is caused by a buffer overflow in the OpenGL component, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. **Recommendations** For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later. For Apple watchOS versions prior to 2.1, update to version 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 **Description** The issue is caused by a buffer overflow in the OpenGL component, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. **Recommendations** For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later. For Apple tvOS versions prior to 9.1, update to version 9.1 or later. For Apple watchOS versions prior to 2.1, update to version 2.1 or later.