← back
CVE-2018-4206

CVE-2018-4206

EPSS 5.0%
An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/44562/unverifiedexploitdbwww.exploit-db.com/exploits/44562unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugs.chromium.org/p/project-zero/issues/detail?id=1529https://support.apple.com/HT208742https://support.apple.com/HT208743https://support.apple.com/HT208850https://support.apple.com/HT208851https://www.exploit-db.com/exploits/44562/http://www.securityfocus.com/bid/103957http://www.securityfocus.com/bid/103958http://www.securitytracker.com/id/1040744