An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (application crash) via a crafted text file.

The version of Apple iOS running on the mobile device is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT208222 advisory.

According to its banner, the version of Apple TV on the remote device is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208219 security advisory.

Note that only 4th and 5th generation models are affected by these vulnerabilities.

ID	Name	Product	Family	Type	Severity
700543	Apple iOS < 11.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices		high
104387	Apple TV < 11.1 Multiple Vulnerabilities	Nessus	Misc.	Remote	high
104350	Apple iOS < 11.1 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	high

Detections

Analytics

CVE-2017-13849

medium

Tenable Plugins

high

high

high