PT-2018-16547 · Apple · Macos High Sierra+1

Saelo · Published 2018-11-05 · Updated 2024-07-03 · CVE-2018-4404

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS High Sierra versions prior to 10.13.5

Description A memory corruption issue exists due to improper memory handling, which was addressed with improved memory handling. The issue also involves an improper access check privilege escalation.

Recommendations For iOS versions prior to 11.4, update to iOS 11.4 or later to resolve the issue. For macOS High Sierra versions prior to 10.13.5, update to macOS High Sierra 10.13.5 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-4404

ZDI-18-1338

Affected Products

Ios

Macos High Sierra

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safari_proxy_object_type_confusion.rb · Exploit
• 🔥 https://exploit-db.com/exploits/45998 · Exploit
• https://osv.dev/vulnerability/CVE-2018-4404 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-1338 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-4404 · Security Note
• https://support.apple.com/HT208849 · Vendor Advisory
• https://t.me/aptreports/10202 · Telegram Post
• https://t.me/ckure/14154 · Telegram Post
• https://t.me/aptreports/10205 · Telegram Post
• https://support.apple.com/HT208848%2C · Note
• https://t.me/true_secator/5806 · Telegram Post