ByteOS Network

Vulnerability Details :

CVE-2018-4442

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-03 Apr, 2019 | 17:43

Updated At-05 Aug, 2024 | 05:18

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:03 Apr, 2019 | 17:43

Updated At:05 Aug, 2024 | 05:18

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows

Versions

Affected

Versions prior to: iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9

Problem Types

Type	CWE ID	Description
text	N/A	Processing maliciously crafted web content may lead to arbitrary code execution

Type: text

CWE ID: N/A

Description: Processing maliciously crafted web content may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/kb/HT209343	x_refsource_MISC
https://support.apple.com/kb/HT209342	x_refsource_MISC
https://support.apple.com/kb/HT209340	x_refsource_MISC
https://support.apple.com/kb/HT209344	x_refsource_MISC
https://support.apple.com/kb/HT209346	x_refsource_MISC
https://support.apple.com/kb/HT209345	x_refsource_MISC

Hyperlink: https://support.apple.com/kb/HT209343

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/kb/HT209342

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/kb/HT209340

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/kb/HT209344

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/kb/HT209346

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/kb/HT209345

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/kb/HT209343	x_refsource_MISC x_transferred
https://support.apple.com/kb/HT209342	x_refsource_MISC x_transferred
https://support.apple.com/kb/HT209340	x_refsource_MISC x_transferred
https://support.apple.com/kb/HT209344	x_refsource_MISC x_transferred
https://support.apple.com/kb/HT209346	x_refsource_MISC x_transferred
https://support.apple.com/kb/HT209345	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/kb/HT209343

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/kb/HT209342

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/kb/HT209340

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/kb/HT209344

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/kb/HT209346

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/kb/HT209345

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:03 Apr, 2019 | 18:29

Updated At:05 Apr, 2019 | 15:58

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Apple Inc.

>>safari>>Versions before 12.0.2(exclusive)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>Versions before 12.1.1(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>tvos>>Versions before 12.1.1(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Apple Inc.

>>watchos>>Versions before 5.1.2(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Apple Inc.

>>icloud>>Versions before 7.9(exclusive)

cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*

Apple Inc.

>>itunes>>Versions before 12.9.2(exclusive)

cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov