CVE-2018-4121

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Link	Resource
https://support.apple.com/HT208698	Vendor Advisory
https://support.apple.com/HT208697	Vendor Advisory
https://support.apple.com/HT208696	Vendor Advisory
https://support.apple.com/HT208695	Vendor Advisory
https://support.apple.com/HT208694	Vendor Advisory
https://support.apple.com/HT208693	Vendor Advisory
http://www.securitytracker.com/id/1040604	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/44427/	Exploit Third Party Advisory
https://github.com/mwrlabs/CVE-2018-4121	Exploit Third Party Advisory
https://security.gentoo.org/glsa/201808-04	Third Party Advisory

Configuration 1

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

---

Published : 2018-04-03 06:29

Updated : 2019-03-08 04:06

---

NVD link : CVE-2018-4121

Mitre link : CVE-2018-4121

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer