ISOMAN

CVE

CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html
  2. http://www.securitytracker.com/id/1041029
  3. https://security.gentoo.org/glsa/201808-04
  4. https://support.apple.com/HT208848
  5. https://support.apple.com/HT208850
  6. https://support.apple.com/HT208851
  7. https://support.apple.com/HT208852
  8. https://support.apple.com/HT208853
  9. https://support.apple.com/HT208854
  10. https://usn.ubuntu.com/3687-1/
  11. https://www.exploit-db.com/exploits/45998/
  12. http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html
  13. http://www.securitytracker.com/id/1041029
  14. https://security.gentoo.org/glsa/201808-04
  15. https://support.apple.com/HT208848
  16. https://support.apple.com/HT208850
  17. https://support.apple.com/HT208851
  18. https://support.apple.com/HT208852
  19. https://support.apple.com/HT208853
  20. https://support.apple.com/HT208854