CVE-2018-4233
95Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 8.8epss 54%
da publicação à arma61 dias
Publicada no NVD8 de jun.
1ª PoC+61d
metasploit15 de mar.
VulnCheck+2182d
probabilidade de exploração
54%top 1% das CVEs
exploração observada
simVulnCheck
5 exploit(s) público(s)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aPoCs públicas encontradas — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45998githubgithub.com/saelo/cve-2018-4233★ 178cve_referencepacketstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.htmlnão verificadocve_referencewww.exploit-db.com/exploits/45998/não verificadovulncheckvulncheck.com/xdb/4ce5417935b7não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.htmlhttps://security.gentoo.org/glsa/201808-04https://support.apple.com/HT208848https://support.apple.com/HT208850https://support.apple.com/HT208851https://support.apple.com/HT208852https://support.apple.com/HT208853https://support.apple.com/HT208854https://usn.ubuntu.com/3687-1/https://www.exploit-db.com/exploits/45998/http://www.securitytracker.com/id/1041029