PT-2018-16467 · Apple+2 · Icloud+6

Ivan Fratric

·

Publicado

2018-09-28

·

Atualizado

2019-04-04

·

CVE-2018-4197

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12 Apple tvOS versions prior to 12 Apple Safari versions prior to 12 Apple iTunes for Windows versions prior to 12.9 Apple iCloud for Windows versions prior to 7.7
Description A use after free issue was addressed with improved memory management.
Recommendations For iOS versions prior to 12, update to iOS 12 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For Safari versions prior to 12, update to Safari 12 or later. For iTunes for Windows versions prior to 12.9, update to iTunes 12.9 or later. For iCloud for Windows versions prior to 7.7, update to iCloud for Windows 7.7 or later.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2018-4197
OPENSUSE-SU-2019:0081-1
OPENSUSE-SU-2019_0068-1
OPENSUSE-SU-2019_0081-1
SUSE-SU-2019:0059-1
SUSE-SU-2019:0092-1
USN-3781-1
USN-3781-2

Produtos afetados

Safari
Suse
Ubuntu
Icloud
Ios
Itunes
Tvos