Vulnerability Name: | CVE-2018-4124 (CCN-139214) | ||||||||||||
Assigned: | 2018-02-19 | ||||||||||||
Published: | 2018-02-19 | ||||||||||||
Updated: | 2019-03-08 | ||||||||||||
Summary: | An issue was discovered in certain Apple products. iOS before 11.2.6 is affected. macOS before 10.13.3 Supplemental Update is affected. tvOS before 11.2.6 is affected. watchOS before 4.2.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a crafted string containing a certain Telugu character. | ||||||||||||
CVSS v3 Severity: | 9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) 8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C)
| ||||||||||||
Vulnerability Type: | CWE-119 | ||||||||||||
Vulnerability Consequences: | Denial of Service | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2018-4124 Source: SECTRACK Type: Third Party Advisory, VDB Entry 1040396 Source: XF Type: UNKNOWN apple-cve20184124-dos(139214) Source: MISC Type: Third Party Advisory https://nakedsecurity.sophos.com/2018/02/20/apple-fixes-that-1-character-to-crash-your-mac-and-iphone-bug/ Source: CCN Type: Apple security document HT208534 About the security content of iOS 11.2.6 Source: CCN Type: Apple security document HT208535 About the security content of macOS High Sierra 10.13.3 Supplemental Update Source: CCN Type: Apple security document HT208536 About the security content of tvOS 11.2.6 Source: CCN Type: Apple security document HT208537 About the security content of watchOS 4.2.3 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208534 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208535 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208536 Source: CONFIRM Type: Vendor Advisory https://support.apple.com/HT208537 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||||||
BACK |