CVE-2018-4096 in Safari

Summary

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

01/02/2018

Disclosure

04/03/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
112606	Apple Safari WebKit memory corruption	119	Not defined	Official fix	CVE-2018-4096
112603	Apple iOS WebKit memory corruption	119	Not defined	Official fix	CVE-2018-4096
112589	Apple macOS WebKit memory corruption	119	Not defined	Official fix	CVE-2018-4096

Sources

• MITRE
• NVD
• CVE Details