Sign-up

ID

VAR-201804-1210


CVE

CVE-2018-4096


TITLE

plural Apple Used in products WebKit Vulnerability in arbitrary code execution in components

Trust: 0.8

sources: JVNDB: JVNDB-2018-003726

DESCRIPTION

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Apple iOS is an operating system developed for mobile devices; iCloud for Windows is a cloud service based on the Windows platform; iTunes for Windows is a set of media player applications based on the Windows platform. WebKit is one of the web browser engine components. Versions earlier than 2; versions earlier than macOS High Sierra 10.13.3; iCloud versions earlier than 7.3 based on the Windows platform. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-1 iOS 11.2.5 iOS 11.2.5 is now available and addresses the following: Audio Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University Core Bluetooth Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4087: Rani Idan (@raniXCH) of Zimperium zLabs Team CVE-2018-4095: Rani Idan (@raniXCH) of Zimperium zLabs Team Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4090: Jann Horn of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A race condition was addressed through improved locking. CVE-2018-4092: an anonymous researcher Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4082: Russ Cox of Google Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4093: Jann Horn of Google Project Zero LinkPresentation Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted text message may lead to application denial of service Description: A resource exhaustion issue was addressed through improved input validation. CVE-2018-4100: Abraham Masri (@cheesecakeufo) QuartzCore Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of web content. This issue was addressed through improved input validation. CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day Initiative Security Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed through improved trust evaluation of certificates. CVE-2018-4086: Ian Haken of Netflix WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4089: Ivan Fratric of Google Project Zero CVE-2018-4096: found by OSS-Fuzz Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "11.2.5". Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng6cpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEbJVxAA y2gRrvCCEzescN0fgqNk8zIGqaiFRKXYEyuaHMgXjrJIh8OlBgLb3pegU6MFfTsv SjNLDKvPIOW/2vV8ilS6ot32DB4VTANjHKCWTs3jmJrQlWh2VZKvPnzyOiQ0zK2g Btt4+1ZYipRuCyWkf0oatW9JHsCscVexzERyczywBdEzx1mCnCF4N3uOYU0T3Nx2 7Wz92GnvTAnJWjlCJEK1wq/YCntEFhssBVmsWQU1LVPFHoh8uPa87iE/+P1t0CY1 IQLloYmPoX9GIS/CB7XAsEsz3RquE8n/DigSvsApkrl6Judv/HgCYe5GJcwIIemi 1RyNXtj3/+CVZYSwC2Fo/CSyph1M+td79Klqy4gdCVt0KnlmwkKhSexhuQsKn68A /WTcOK7aidcdVuQpjUJAc3pJunl0zHg5bCJRzrb2NdFEoYT0V+kxLEKGlOWRLhXv NSn9+f7pMykSCbfo9U9HkYm68JDtN/WANMCJccF66iQYjEhg0Rgok3oKhNOhakwH HDYunzqF2dEql4WiAKiEAHwVVQ5gJtjDWest6s6UW58fiT2fxufaJav5gczv/wmy km/doFT9+BKmRXygwXdR6P3oRFhZmeLVvjtKpfjPzuIvHkwS7wlOw3aWnZ0rMijm pp7WyqEojXjOxyZjTeBM3A7ssxIuO5BoLtIHgT4GSNg= =F6+9 -----END PGP SIGNATURE----- . Alternatively, on your watch, select "My Watch > General > About". ========================================================================== Ubuntu Security Notice USN-3551-1 January 30, 2018 webkit2gtk vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 17.10 - Ubuntu 16.04 LTS Summary: Several security issues were fixed in WebKitGTK+. Software Description: - webkit2gtk: Web content engine library for GTK+ Details: Multiple security issues were discovered in the WebKitGTK+ Web and JavaScript engines. (CVE-2018-4088, CVE-2018-4096, CVE-2017-7153, CVE-2017-7160, CVE-2017-7161, CVE-2017-7165, CVE-2017-13884, CVE-2017-13885) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10: libjavascriptcoregtk-4.0-18 2.18.6-0ubuntu0.17.10.1 libwebkit2gtk-4.0-37 2.18.6-0ubuntu0.17.10.1 Ubuntu 16.04 LTS: libjavascriptcoregtk-4.0-18 2.18.6-0ubuntu0.16.04.1 libwebkit2gtk-4.0-37 2.18.6-0ubuntu0.16.04.1 This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK+, such as Epiphany, to make all the necessary changes. References: https://www.ubuntu.com/usn/usn-3551-1 CVE-2017-13884, CVE-2017-13885, CVE-2017-7153, CVE-2017-7160, CVE-2017-7161, CVE-2017-7165, CVE-2018-4088, CVE-2018-4096 Package Information: https://launchpad.net/ubuntu/+source/webkit2gtk/2.18.6-0ubuntu0.17.10.1 https://launchpad.net/ubuntu/+source/webkit2gtk/2.18.6-0ubuntu0.16.04.1

Trust: 2.43

sources: NVD: CVE-2018-4096 // JVNDB: JVNDB-2018-003726 // VULHUB: VHN-134127 // VULMON: CVE-2018-4096 // PACKETSTORM: 146066 // PACKETSTORM: 146084 // PACKETSTORM: 146085 // PACKETSTORM: 146082 // PACKETSTORM: 146083 // PACKETSTORM: 146183 // PACKETSTORM: 146086

AFFECTED PRODUCTS

vendor:applemodel:icloudscope:ltversion:7.3

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:4.2.2

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:17.10

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:11.2.5

Trust: 1.0

vendor:applemodel:itunesscope:ltversion:12.7.3

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.13.3

Trust: 1.0

vendor:applemodel:tvscope:ltversion:11.2.5

Trust: 1.0

vendor:applemodel:safariscope:ltversion:11.0.3

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:16.04

Trust: 1.0

vendor:canonicalmodel:ubuntuscope: - version: -

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.13.2

Trust: 0.8

vendor:applemodel:icloudscope:ltversion:7.3 (windows 7 or later )

Trust: 0.8

vendor:applemodel:iosscope:ltversion:11.2.5 (ipad air or later )

Trust: 0.8

vendor:applemodel:iosscope:ltversion:11.2.5 (iphone 5s or later )

Trust: 0.8

vendor:applemodel:iosscope:ltversion:11.2.5 (ipod touch first 6 generation )

Trust: 0.8

vendor:applemodel:itunesscope:ltversion:for windows 12.7.3 (windows 7 or later )

Trust: 0.8

vendor:applemodel:safariscope:ltversion:11.0.3 (macos high sierra 10.13.3)

Trust: 0.8

vendor:applemodel:safariscope:ltversion:11.0.3 (macos sierra 10.12.6)

Trust: 0.8

vendor:applemodel:safariscope:ltversion:11.0.3 (os x el capitan 10.11.6)

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:11.2.5 (apple tv 4k)

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:11.2.5 (apple tv first 4 generation )

Trust: 0.8

vendor:applemodel:watchosscope:ltversion:4.2.2 (apple watch all models )

Trust: 0.8

vendor:applemodel:iphone osscope:eqversion:10.0.3

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.0.2

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.2.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.2

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.3

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.0.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.1.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.3.5

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:10.0

Trust: 0.6

sources: JVNDB: JVNDB-2018-003726 // CNNVD: CNNVD-201801-962 // NVD: CVE-2018-4096

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-4096
value: HIGH

Trust: 1.0

NVD: CVE-2018-4096
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201801-962
value: MEDIUM

Trust: 0.6

VULHUB: VHN-134127
value: MEDIUM

Trust: 0.1

VULMON: CVE-2018-4096
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2018-4096
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-134127
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-4096
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-134127 // VULMON: CVE-2018-4096 // JVNDB: JVNDB-2018-003726 // CNNVD: CNNVD-201801-962 // NVD: CVE-2018-4096

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-134127 // JVNDB: JVNDB-2018-003726 // NVD: CVE-2018-4096

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201801-962

TYPE

code execution

Trust: 0.6

sources: PACKETSTORM: 146066 // PACKETSTORM: 146084 // PACKETSTORM: 146085 // PACKETSTORM: 146082 // PACKETSTORM: 146083 // PACKETSTORM: 146086

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-003726

PATCH
title:HT208473url:https://support.apple.com/en-us/HT208473
Trust: 0.8
title:HT208474url:https://support.apple.com/en-us/HT208474
Trust: 0.8
title:HT208475url:https://support.apple.com/en-us/HT208475
Trust: 0.8
title:HT208462url:https://support.apple.com/en-us/HT208462
Trust: 0.8
title:HT208463url:https://support.apple.com/en-us/HT208463
Trust: 0.8
title:HT208464url:https://support.apple.com/en-us/HT208464
Trust: 0.8
title:HT208465url:https://support.apple.com/en-us/HT208465
Trust: 0.8
title:HT208474url:https://support.apple.com/ja-jp/HT208474
Trust: 0.8
title:HT208475url:https://support.apple.com/ja-jp/HT208475
Trust: 0.8
title:HT208462url:https://support.apple.com/ja-jp/HT208462
Trust: 0.8
title:HT208463url:https://support.apple.com/ja-jp/HT208463
Trust: 0.8
title:HT208464url:https://support.apple.com/ja-jp/HT208464
Trust: 0.8
title:HT208465url:https://support.apple.com/ja-jp/HT208465
Trust: 0.8
title:HT208473url:https://support.apple.com/ja-jp/HT208473
Trust: 0.8
title:USN-3551-1url:https://usn.ubuntu.com/3551-1/
Trust: 0.8
title:Multiple Apple product WebKit Fixes for component security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=78086
Trust: 0.6
title:Apple: Safari 11.0.3url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=0aeba038c5855164150f85f75743f086
Trust: 0.1
title:Apple: iTunes 12.7.3 for Windowsurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=9aeff91c0887cf286a567f1e79bd1c63
Trust: 0.1
title:Apple: iCloud for Windows 7.3url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=359ebc9dc2f7ab1fdf680d0179a9db2c
Trust: 0.1
title:Ubuntu Security Notice: webkit2gtk vulnerabilitiesurl:https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-3551-1
Trust: 0.1
title:Apple: iOS 11.2.5url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=1b776314c9d657c984f3dc7b0dc72bfa
Trust: 0.1
title:Apple: watchOS 4.2.2url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=86ed426c97c126c4934a936a2782aa06
Trust: 0.1
title:Apple: tvOS 11.2.5url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=ae65c86c2cefebd685318cf7662d741a
Trust: 0.1
title:Apple: macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitanurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=f90f5551077f4ae87cb6d5192df0a729
Trust: 0.1
title:Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2018url:https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=586e6062440cdd312211d748e028164e
Trust: 0.1
title:The Registerurl:https://www.theregister.co.uk/2018/01/24/apple_ios_macos_patches/
Trust: 0.1
sources:
            
            
            VULMON: CVE-2018-4096 // 
            
            
            
            JVNDB: JVNDB-2018-003726 // 
            
            
            
            CNNVD: CNNVD-201801-962

EXTERNAL IDS
db:NVDid:CVE-2018-4096
Trust: 3.3
db:BIDid:102775
Trust: 1.8
db:SECTRACKid:1040267
Trust: 1.2
db:SECTRACKid:1040265
Trust: 1.2
db:SECTRACKid:1040266
Trust: 1.2
db:JVNid:JVNVU99446427
Trust: 0.8
db:JVNDBid:JVNDB-2018-003726
Trust: 0.8
db:CNNVDid:CNNVD-201801-962
Trust: 0.7
db:VULHUBid:VHN-134127
Trust: 0.1
db:VULMONid:CVE-2018-4096
Trust: 0.1
db:PACKETSTORMid:146066
Trust: 0.1
db:PACKETSTORMid:146084
Trust: 0.1
db:PACKETSTORMid:146085
Trust: 0.1
db:PACKETSTORMid:146082
Trust: 0.1
db:PACKETSTORMid:146083
Trust: 0.1
db:PACKETSTORMid:146183
Trust: 0.1
db:PACKETSTORMid:146086
Trust: 0.1
sources:
            
            
            VULHUB: VHN-134127 // 
            
            
            
            VULMON: CVE-2018-4096 // 
            
            
            
            JVNDB: JVNDB-2018-003726 // 
            
            
            
            PACKETSTORM: 146066 // 
            
            
            
            PACKETSTORM: 146084 // 
            
            
            
            PACKETSTORM: 146085 // 
            
            
            
            PACKETSTORM: 146082 // 
            
            
            
            PACKETSTORM: 146083 // 
            
            
            
            PACKETSTORM: 146183 // 
            
            
            
            PACKETSTORM: 146086 // 
            
            
            
            CNNVD: CNNVD-201801-962 // 
            
            
            
            NVD: CVE-2018-4096

REFERENCES
url:http://www.securityfocus.com/bid/102775
Trust: 1.9
url:https://support.apple.com/ht208462
Trust: 1.8
url:https://support.apple.com/ht208463
Trust: 1.8
url:https://support.apple.com/ht208464
Trust: 1.8
url:https://support.apple.com/ht208465
Trust: 1.8
url:https://support.apple.com/ht208473
Trust: 1.8
url:https://support.apple.com/ht208474
Trust: 1.8
url:https://support.apple.com/ht208475
Trust: 1.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-4096
Trust: 1.5
url:https://usn.ubuntu.com/3551-1/
Trust: 1.3
url:http://www.securitytracker.com/id/1040265
Trust: 1.2
url:http://www.securitytracker.com/id/1040266
Trust: 1.2
url:http://www.securitytracker.com/id/1040267
Trust: 1.2
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-4096
Trust: 0.8
url:http://jvn.jp/vu/jvnvu99446427/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-4088
Trust: 0.7
url:https://support.apple.com/kb/ht201222
Trust: 0.6
url:https://www.apple.com/support/security/pgp/
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2018-4085
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4087
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4095
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4093
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4094
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4086
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4090
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4082
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4089
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4092
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4100
Trust: 0.2
url:https://cwe.mitre.org/data/definitions/119.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://tools.cisco.com/security/center/viewalert.x?alertid=56562
Trust: 0.1
url:https://www.apple.com/itunes/
Trust: 0.1
url:https://www.apple.com/itunes/download/
Trust: 0.1
url:https://support.apple.com/kb/ht204641
Trust: 0.1
url:https://www.ubuntu.com/usn/usn-3551-1
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-7161
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-7153
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-13884
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/webkit2gtk/2.18.6-0ubuntu0.17.10.1
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-7165
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-7160
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-13885
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/webkit2gtk/2.18.6-0ubuntu0.16.04.1
Trust: 0.1
url:https://support.apple.com/ht204283
Trust: 0.1
sources:
            
            
            VULHUB: VHN-134127 // 
            
            
            
            VULMON: CVE-2018-4096 // 
            
            
            
            JVNDB: JVNDB-2018-003726 // 
            
            
            
            PACKETSTORM: 146066 // 
            
            
            
            PACKETSTORM: 146084 // 
            
            
            
            PACKETSTORM: 146085 // 
            
            
            
            PACKETSTORM: 146082 // 
            
            
            
            PACKETSTORM: 146083 // 
            
            
            
            PACKETSTORM: 146183 // 
            
            
            
            PACKETSTORM: 146086 // 
            
            
            
            CNNVD: CNNVD-201801-962 // 
            
            
            
            NVD: CVE-2018-4096

CREDITS
Apple
Trust: 0.6
sources:
            
            
            PACKETSTORM: 146066 // 
            
            
            
            PACKETSTORM: 146084 // 
            
            
            
            PACKETSTORM: 146085 // 
            
            
            
            PACKETSTORM: 146082 // 
            
            
            
            PACKETSTORM: 146083 // 
            
            
            
            PACKETSTORM: 146086

SOURCES
db:VULHUBid:VHN-134127
db:VULMONid:CVE-2018-4096
db:JVNDBid:JVNDB-2018-003726
db:PACKETSTORMid:146066
db:PACKETSTORMid:146084
db:PACKETSTORMid:146085
db:PACKETSTORMid:146082
db:PACKETSTORMid:146083
db:PACKETSTORMid:146183
db:PACKETSTORMid:146086
db:CNNVDid:CNNVD-201801-962
db:NVDid:CVE-2018-4096

LAST UPDATE DATE
2025-04-30T01:54:49.705000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-134127date:2018-04-27T00:00:00
db:VULMONid:CVE-2018-4096date:2018-04-27T00:00:00
db:JVNDBid:JVNDB-2018-003726date:2018-06-04T00:00:00
db:CNNVDid:CNNVD-201801-962date:2018-01-26T00:00:00
db:NVDid:CVE-2018-4096date:2024-11-21T04:06:45.530

SOURCES RELEASE DATE
db:VULHUBid:VHN-134127date:2018-04-03T00:00:00
db:VULMONid:CVE-2018-4096date:2018-04-03T00:00:00
db:JVNDBid:JVNDB-2018-003726date:2018-06-04T00:00:00
db:PACKETSTORMid:146066date:2018-01-24T16:56:42
db:PACKETSTORMid:146084date:2018-01-25T01:51:16
db:PACKETSTORMid:146085date:2018-01-25T01:51:30
db:PACKETSTORMid:146082date:2018-01-25T01:49:38
db:PACKETSTORMid:146083date:2018-01-25T01:50:55
db:PACKETSTORMid:146183date:2018-01-31T01:16:23
db:PACKETSTORMid:146086date:2018-01-25T01:51:41
db:CNNVDid:CNNVD-201801-962date:2018-01-26T00:00:00
db:NVDid:CVE-2018-4096date:2018-04-03T06:29:03.750