CVE-2018-4121

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendepss 13%

da publicação à arma6 dias

Publicada no NVD3 de abr.

1ª PoC+6d

probabilidade de exploração

13%top 4% das CVEs

exploração observada

nãonenhuma fonte reporta

5 exploit(s) público(s)

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 5

githubgithub.com/FSecureLABS/CVE-2018-4121★ 120 githubgithub.com/likekabin/CVE-2018-4121★ 0 githubgithub.com/jezzus/CVE-2018-4121★ 0 exploitdbwww.exploit-db.com/exploits/44427não verificado cve_referencewww.exploit-db.com/exploits/44427/não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

https://github.com/mwrlabs/CVE-2018-4121 https://security.gentoo.org/glsa/201808-04 https://support.apple.com/HT208693 https://support.apple.com/HT208694 https://support.apple.com/HT208695 https://support.apple.com/HT208696 https://support.apple.com/HT208697 https://support.apple.com/HT208698 https://www.exploit-db.com/exploits/44427/http://www.securitytracker.com/id/1040604