ByteOS Network

Vulnerability Details :

CVE-2018-4144

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-03 Apr, 2018 | 06:00

Updated At-05 Aug, 2024 | 05:04

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Security" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:03 Apr, 2018 | 06:00

Updated At:05 Aug, 2024 | 05:04

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://support.apple.com/HT208692	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040604	vdb-entry x_refsource_SECTRACK
https://support.apple.com/HT208698	x_refsource_CONFIRM
http://www.securityfocus.com/bid/103582	vdb-entry x_refsource_BID
https://support.apple.com/HT208696	x_refsource_CONFIRM
https://support.apple.com/HT208693	x_refsource_CONFIRM
https://support.apple.com/HT208694	x_refsource_CONFIRM
https://support.apple.com/HT208697	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040608	vdb-entry x_refsource_SECTRACK

Hyperlink: https://support.apple.com/HT208692

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1040604

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://support.apple.com/HT208698

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/103582

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://support.apple.com/HT208696

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208693

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208694

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT208697

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1040608

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/HT208692	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1040604	vdb-entry x_refsource_SECTRACK x_transferred
https://support.apple.com/HT208698	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/103582	vdb-entry x_refsource_BID x_transferred
https://support.apple.com/HT208696	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208693	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208694	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT208697	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1040608	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: https://support.apple.com/HT208692

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id/1040604

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://support.apple.com/HT208698

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/103582

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://support.apple.com/HT208696

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208693

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208694

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.apple.com/HT208697

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id/1040608

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:03 Apr, 2018 | 06:29

Updated At:08 Mar, 2019 | 16:06

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Apple Inc.

>>iphone_os>>Versions before 11.3(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>Versions before 10.13.4(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Apple Inc.

>>tvos>>Versions before 11.3(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Apple Inc.

>>watchos>>Versions before 4.3(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Apple Inc.

>>icloud>>Versions before 7.4(exclusive)

cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Apple Inc.

>>itunes>>Versions before 12.7.4(exclusive)

cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov