An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The version of Apple iOS running on the mobile device is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the HT208334 advisory.

According to its banner, the version of Apple TV on the remote device is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as described in the HT208327 security advisory.

Note that only 4th and 5th generation models are affected by these vulnerabilities.

ID	Name	Product	Family	Type	Severity
700544	Apple iOS < 11.2 Multiple Vulnerabilities (APPLE-SA-2017-12-13-6)	Nessus Network Monitor	Mobile Devices		high
105612	Apple TV < 11.2 Multiple Vulnerabilities	Nessus	Misc.	Remote	high
105075	Apple iOS < 11.2 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	high

Detections

Analytics

CVE-2017-13861

high

Tenable Plugins

high

high

high