| Vulnerability Name: | CVE-2018-4089 (CCN-138231) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2018-01-23 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2018-01-23 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2018-04-27 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 7.9 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2018-4089 Source: BID Type: Third Party Advisory, VDB Entry 102778 Source: CCN Type: BID-102778 WebKit CVE-2018-4089 Memory Corruption Vulnerability Source: SECTRACK Type: Third Party Advisory, VDB Entry 1040265 Source: SECTRACK Type: Third Party Advisory, VDB Entry 1040266 Source: SECTRACK Type: Third Party Advisory, VDB Entry 1040267 Source: XF Type: UNKNOWN apple-safari-cve20184089-code-exec(138231) Source: CCN Type: Packet Storm Security [02-03-2018] WebKit detachWrapper Use-After-Free Source: CCN Type: Apple security document HT208475 About the security content of Safari 11.0.3 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208462 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208463 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208465 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208475 Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [02-01-2018] Source: EXPLOIT-DB Type: Exploit, Third Party Advisory, VDB Entry 43937 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||