PT-2018-16547 · Apple · Macos High Sierra+1

Saelo · Publicado 2018-11-05 · Atualizado 2024-07-03 · CVE-2018-4404

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS High Sierra versions prior to 10.13.5

Description A memory corruption issue exists due to improper memory handling, which was addressed with improved memory handling. The issue also involves an improper access check privilege escalation.

Recommendations For iOS versions prior to 11.4, update to iOS 11.4 or later to resolve the issue. For macOS High Sierra versions prior to 10.13.5, update to macOS High Sierra 10.13.5 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-4404

ZDI-18-1338

Produtos afetados

Ios

Macos High Sierra

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safari_proxy_object_type_confusion.rb · Exploit
• 🔥 https://exploit-db.com/exploits/45998 · Exploit
• https://osv.dev/vulnerability/CVE-2018-4404 · Aviso do Fabricante
• https://t.me/aptreports/10202 · Publicação no Telegram
• https://t.me/ckure/14154 · Publicação no Telegram
• https://zerodayinitiative.com/advisories/ZDI-18-1338 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-4404 · Nota de Segurança
• https://t.me/aptreports/10205 · Publicação no Telegram
• https://support.apple.com/HT208849 · Aviso do Fabricante
• https://support.apple.com/HT208848%2C · Nota
• https://t.me/true_secator/5806 · Publicação no Telegram