← Back

CVE-2018-4209

nvd nist
Published: Jan 11, 2019Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.

Affected (8)

Apple
6 products
Iphone Os
Safari
Tvos
Watchos
Icloud
Itunes
Canonical
1 product
Ubuntu Linux
Webkit
1 product
Webkitgtk+
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Iphone Os
Before 11.3
Safari
Before 11.1
Tvos
Before 11.3
Watchos
Before 4.3
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Icloud
Before 7.4
Itunes
Before 12.7.4
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 18.04
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Webkitgtk+
Before 2.22.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (21)

Source: product-security@apple.com
Third Party Advisory
Source: product-security@apple.com
Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Third Party Advisory
Source: nvd@nist.gov
Vendor Advisory
Source: nvd@nist.gov
Vendor Advisory
Source: nvd@nist.gov
Vendor Advisory
Source: nvd@nist.gov
Vendor Advisory
Source: nvd@nist.gov
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.