PT-2018-16435 · Apple · Ios

Nico Golde · Publicado 2018-04-03 · Atualizado 2018-05-04 · CVE-2018-4148

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3

Description An issue was discovered in certain Apple products, involving the Telephony component. The issue allows remote attackers to execute arbitrary code due to a buffer overflow.

Recommendations For iOS versions prior to 11.3, update to version 11.3 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-4148

Produtos afetados

Ios

Referências · 5

• 🔥 https://comsecuris.com/blog/posts/theres_life_in_the_old_dog_yet_tearing_new_holes_into_inteliphone_cellular_modems · Exploit
• https://osv.dev/vulnerability/CVE-2018-4148 · Aviso do Fabricante
• http://securityfocus.com/bid/103578 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-4148 · Nota de Segurança
• https://support.apple.com/HT208693 · Aviso do Fabricante