CVE-2018-4233
95Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 8.8epss 54%
de la publicación al arma61 días
Publicada en NVD8 jun
1ª PoC+61d
metasploit15 mar
VulnCheck+2182d
probabilidad de explotación
54%top 1% de las CVE
explotación observada
síVulnCheck
5 exploit(s) público(s)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/aPoCs públicas encontradas — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45998githubgithub.com/saelo/cve-2018-4233★ 178cve_referencepacketstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.htmlno verificadocve_referencewww.exploit-db.com/exploits/45998/no verificadovulncheckvulncheck.com/xdb/4ce5417935b7no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.htmlhttps://security.gentoo.org/glsa/201808-04https://support.apple.com/HT208848https://support.apple.com/HT208850https://support.apple.com/HT208851https://support.apple.com/HT208852https://support.apple.com/HT208853https://support.apple.com/HT208854https://usn.ubuntu.com/3687-1/https://www.exploit-db.com/exploits/45998/http://www.securitytracker.com/id/1041029