CVE-2016-7578 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-7578 Interim 1 14 2025-11-05T04:19:48Z current 2021-05-30T13:45:58Z 2025-11-05T04:19:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-7578 An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 libjavascriptcoregtk-3_0-0 libjavascriptcoregtk-4_0-18 libwebkit2gtk-3_0-25 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang libwebkitgtk-3_0-0 libwebkitgtk3-devel libwebkitgtk3-lang typelib-1_0-JavaScriptCore-3_0 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit-3_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles webkit2gtk3 webkit2gtk3-devel webkitgtk3 libjavascriptcoregtk-3_0-0 as a component of SUSE Linux Enterprise Desktop 12 SP1 libwebkit2gtk-3_0-25 as a component of SUSE Linux Enterprise Desktop 12 SP1 libwebkitgtk-3_0-0 as a component of SUSE Linux Enterprise Desktop 12 SP1 libwebkitgtk3-lang as a component of SUSE Linux Enterprise Desktop 12 SP1 typelib-1_0-JavaScriptCore-3_0 as a component of SUSE Linux Enterprise Desktop 12 SP1 typelib-1_0-WebKit-3_0 as a component of SUSE Linux Enterprise Desktop 12 SP1 webkitgtk3 as a component of SUSE Linux Enterprise Desktop 12 SP1 libjavascriptcoregtk-3_0-0 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwebkit2gtk-3_0-25 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwebkitgtk-3_0-0 as a component of SUSE Linux Enterprise Desktop 12 SP2 libwebkitgtk3-lang as a component of SUSE Linux Enterprise Desktop 12 SP2 typelib-1_0-JavaScriptCore-3_0 as a component of SUSE Linux Enterprise Desktop 12 SP2 typelib-1_0-WebKit-3_0 as a component of SUSE Linux Enterprise Desktop 12 SP2 webkitgtk3 as a component of SUSE Linux Enterprise Desktop 12 SP2 libjavascriptcoregtk-3_0-0 as a component of SUSE Linux Enterprise Server 12 SP1 libwebkitgtk-3_0-0 as a component of SUSE Linux Enterprise Server 12 SP1 libwebkitgtk3-lang as a component of SUSE Linux Enterprise Server 12 SP1 webkitgtk3 as a component of SUSE Linux Enterprise Server 12 SP1 libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 12 SP2 libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 12 SP2 typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 12 SP2 typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 12 SP2 webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 12 SP2 webkit2gtk3 as a component of SUSE Linux Enterprise Server 12 SP2 libwebkit2gtk-3_0-25 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libwebkitgtk3-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 typelib-1_0-JavaScriptCore-3_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 typelib-1_0-WebKit-3_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 webkitgtk3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 webkit2gtk3-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 webkit2gtk3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libwebkit2gtk-3_0-25 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libwebkitgtk3-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 typelib-1_0-JavaScriptCore-3_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 typelib-1_0-WebKit-3_0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 webkitgtk3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libwebkit2gtk-3_0-25 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 typelib-1_0-JavaScriptCore-3_0 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 typelib-1_0-WebKit-3_0 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 webkitgtk3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 webkit2gtk3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 libwebkit2gtk-3_0-25 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 typelib-1_0-JavaScriptCore-3_0 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 typelib-1_0-WebKit-3_0 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 webkitgtk3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. CVE-2016-7578 SUSE Linux Enterprise Server 12 SP2:libjavascriptcoregtk-4_0-18 SUSE Linux Enterprise Server 12 SP2:libwebkit2gtk-4_0-37 SUSE Linux Enterprise Server 12 SP2:typelib-1_0-JavaScriptCore-4_0 SUSE Linux Enterprise Server 12 SP2:typelib-1_0-WebKit2-4_0 SUSE Linux Enterprise Server 12 SP2:webkit2gtk-4_0-injected-bundles SUSE Linux Enterprise Server 12 SP2:webkit2gtk3 SUSE Linux Enterprise Software Development Kit 12 SP2:webkit2gtk3 SUSE Linux Enterprise Software Development Kit 12 SP2:webkit2gtk3-devel SUSE Linux Enterprise Workstation Extension 12 SP2:libwebkit2gtk3-lang SUSE Linux Enterprise Workstation Extension 12 SP2:webkit2gtk3 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H