Sign-up

ID

VAR-201806-1483


CVE

CVE-2018-4193


TITLE

Apple macOS of Windows Server Component vulnerable to arbitrary code execution in privileged context

Trust: 0.8

sources: JVNDB: JVNDB-2018-005822

DESCRIPTION

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.The specific flaw exists within the WindowServer process. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges under the context of the WindowServer. Apple macOS are prone to a memory-corruption vulnerability. Failed exploit attempts will result in a denial-of-service condition. Apple macOS High Sierra is a set of dedicated operating systems developed by Apple (Apple) for Mac computers. A security vulnerability exists in Windows Server components in versions of Apple macOS High Sierra prior to 10.13.5. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2018-7-23-2 Additional information for APPLE-SA-2018-06-01-1 macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, and Security Update 2018-003 El Capitan address the following: Accessibility Framework Available for: macOS High Sierra 10.13.4 Impact: A malicious application may be able to execute arbitrary code with system privileges Description: An information disclosure issue existed in Accessibility Framework. This issue was addressed with improved memory management. CVE-2018-4196: G. Geshev working with Trend Micro's Zero Day Initiative, an anonymous researcher AMD Available for: macOS High Sierra 10.13.4 Impact: A local user may be able to read kernel memory Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. CVE-2018-4253: shrek_wzw of Qihoo 360 Nirvan Team apache_mod_php Available for: macOS High Sierra 10.13.4 Impact: Issues in php were addressed in this update Description: This issue was addressed by updating to php version 7.1.16. CVE-2018-7584: Wei Lei and Liu Yang of Nanyang Technological University ATS Available for: macOS High Sierra 10.13.4 Impact: A malicious application may be able to elevate privileges Description: A type confusion issue was addressed with improved memory handling. CVE-2018-4219: Mohamed Ghannam (@_simo36) Bluetooth Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6 Impact: A malicious application may be able to determine kernel memory layout. Description: An information disclosure issue existed in device properties. This issue was addressed with improved object management. CVE-2018-4171: shrek_wzw of Qihoo 360 Nirvan Team Bluetooth Available for: MacBook Pro (Retina, 15-inch, Mid 2015), MacBook Pro (Retina, 15-inch, 2015), MacBook Pro (Retina, 13-inch, Early 2015), MacBook Pro (15-inch, 2017), MacBook Pro (15-inch, 2016), MacBook Pro (13-inch, Late 2016, Two Thunderbolt 3 Ports), MacBook Pro (13-inch, Late 2016, Four Thunderbolt 3 Ports), MacBook Pro (13-inch, 2017, Four Thunderbolt 3 Ports), MacBook (Retina, 12-inch, Early 2016), MacBook (Retina, 12-inch, Early 2015), MacBook (Retina, 12-inch, 2017), iMac Pro, iMac (Retina 5K, 27-inch, Late 2015), iMac (Retina 5K, 27-inch, 2017), iMac (Retina 4K, 21.5-inch, Late 2015), iMac (Retina 4K, 21.5-inch, 2017), iMac (21.5-inch, Late 2015), and iMac (21.5-inch, 2017) Impact: An attacker in a privileged network position may be able to intercept Bluetooth traffic Description: An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. CVE-2018-5383: Lior Neumann and Eli Biham Entry added July 23, 2018 Firmware Available for: macOS High Sierra 10.13.4 Impact: A malicious application with root privileges may be able to modify the EFI flash memory region Description: A device configuration issue was addressed with an updated configuration. CVE-2018-4251: Maxim Goryachy and Mark Ermolov FontParser Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6, macOS High Sierra 10.13.4 Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation. CVE-2018-4211: Proteas of Qihoo 360 Nirvan Team Grand Central Dispatch Available for: macOS High Sierra 10.13.4 Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An issue existed in parsing entitlement plists. This issue was addressed with improved input validation. CVE-2018-4229: Jakob Rieck (@0xdead10cc) of the Security in Distributed Systems Group, University of Hamburg Graphics Drivers Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6, macOS High Sierra 10.13.4 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4242: Zhuo Liang of Qihoo 360 Nirvan Team iBooks Available for: macOS High Sierra 10.13.4 Impact: An attacker in a privileged network position may be able to spoof password prompts in iBooks Description: An input validation issue was addressed with improved input validation. CVE-2018-4202: Jerry Decime Intel Graphics Driver Available for: macOS High Sierra 10.13.4 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4141: an anonymous researcher, Zhao Qixun (@S0rryMybad) of Qihoo 360 Vulcan Team IOFireWireAVC Available for: macOS High Sierra 10.13.4 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved locking. CVE-2018-4234: Proteas of Qihoo 360 Nirvan Team Kernel Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6, macOS High Sierra 10.13.4 Impact: An attacker in a privileged position may be able to perform a denial of service attack Description: A denial of service issue was addressed with improved validation. CVE-2018-4249: Kevin Backhouse of Semmle Ltd. Kernel Available for: OS X El Capitan 10.11.6, macOS Sierra 10.12.6 Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: In some circumstances, some operating systems may not expect or properly handle an Intel architecture debug exception after certain instructions. The issue appears to be from an undocumented side effect of the instructions. An attacker might utilize this exception handling to gain access to Ring 0 and access sensitive memory or control operating system processes. CVE-2018-8897: Andy Lutomirski, Nick Peterson (linkedin.com/in/everdox) of Everdox Tech LLC Kernel Available for: macOS High Sierra 10.13.4 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A buffer overflow was addressed with improved bounds checking. CVE-2018-4241: Ian Beer of Google Project Zero CVE-2018-4243: Ian Beer of Google Project Zero libxpc Available for: macOS High Sierra 10.13.4 Impact: An application may be able to gain elevated privileges Description: A logic issue was addressed with improved validation. CVE-2018-4237: Samuel GroA (@5aelo) working with Trend Micro's Zero Day Initiative Mail Available for: macOS High Sierra 10.13.4 Impact: An attacker may be able to exfiltrate the contents of S/MIME-encrypted e-mail Description: An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. CVE-2018-4227: Damian Poddebniak of MA1/4nster University of Applied Sciences, Christian Dresen of MA1/4nster University of Applied Sciences , Jens MA1/4ller of Ruhr University Bochum, Fabian Ising of MA1/4nster University of Applied Sciences, Sebastian Schinzel of MA1/4nster University of Applied Sciences, Simon Friedberger of KU Leuven, Juraj Somorovsky of Ruhr University Bochum, JAPrg Schwenk of Ruhr University Bochum Messages Available for: macOS High Sierra 10.13.4 Impact: A local user may be able to conduct impersonation attacks Description: An injection issue was addressed with improved input validation. CVE-2018-4235: Anurodh Pokharel of Salesforce.com Messages Available for: macOS High Sierra 10.13.4 Impact: Processing a maliciously crafted message may lead to a denial of service Description: This issue was addressed with improved message validation. CVE-2018-4240: Sriram (@Sri_Hxor) of PrimeFort Pvt. Ltd NVIDIA Graphics Drivers Available for: macOS High Sierra 10.13.4 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved locking. CVE-2018-4230: Ian Beer of Google Project Zero Security Available for: macOS High Sierra 10.13.4 Impact: A local user may be able to read a persistent account identifier Description: An authorization issue was addressed with improved state management. CVE-2018-4223: Abraham Masri (@cheesecakeufo) Security Available for: macOS High Sierra 10.13.4 Impact: Users may be tracked by malicious websites using client certificates Description: An issue existed in the handling of S-MIME certificaties. This issue was addressed with improved validation of S-MIME certificates. CVE-2018-4221: Damian Poddebniak of MA1/4nster University of Applied Sciences, Christian Dresen of MA1/4nster University of Applied Sciences , Jens MA1/4ller of Ruhr University Bochum, Fabian Ising of MA1/4nster University of Applied Sciences, Sebastian Schinzel of MA1/4nster University of Applied Sciences, Simon Friedberger of KU Leuven, Juraj Somorovsky of Ruhr University Bochum, JAPrg Schwenk of Ruhr University Bochum Security Available for: macOS High Sierra 10.13.4 Impact: A local user may be able to read a persistent device identifier Description: An authorization issue was addressed with improved state management. CVE-2018-4224: Abraham Masri (@cheesecakeufo) Security Available for: macOS High Sierra 10.13.4 Impact: A local user may be able to modify the state of the Keychain Description: An authorization issue was addressed with improved state management. CVE-2018-4225: Abraham Masri (@cheesecakeufo) Security Available for: macOS High Sierra 10.13.4 Impact: A local user may be able to view sensitive user information Description: An authorization issue was addressed with improved state management. CVE-2018-4226: Abraham Masri (@cheesecakeufo) Speech Available for: macOS High Sierra 10.13.4 Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A sandbox issue existed in the handling of microphone access. This issue was addressed with improved handling of microphone access. CVE-2018-4184: Jakob Rieck (@0xdead10cc) of the Security in Distributed Systems Group, University of Hamburg UIKit Available for: macOS High Sierra 10.13.4 Impact: Processing a maliciously crafted text file may lead to a denial of service Description: A validation issue existed in the handling of text. This issue was addressed with improved validation of text. CVE-2018-4193: Markus Gaasedelen, Nick Burnett, and Patrick Biernat of Ret2 Systems, Inc working with Trend Micro's Zero Day Initiative, Richard Zhu (fluorescence) working with Trend Micro's Zero Day Initiative Installation note: macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, and Security Update 2018-003 El Capitan may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEfcwwPWJ3e0Ig26mf8ecVjteJiCYFAltUsfgACgkQ8ecVjteJ iCafWxAAhgLQIu5BifHdgdN31zuPc8tIhsIAuDiAOXJX9JopRhlbs9KrQCNdz/x2 qDiCmneKttwVIhu9Os3WHLNrSxiWCphz7zhD2WIhN3H7/eF9CE2Po8BJHeZGm22K grdfcc27eGN8AusFxRZ1HfhtCToDVNVDkbwO2nnZ0odEO1cZS8Ray2vcgcX0tRD/ X44amocIlVmC67GgwCH4+MSCdjyXcr6HSYiUcRSOuUFTWD3Q6FF3w5CfS6DMb3UO eUUJxExueT82InZHpL6qeuQprncqsJdtZqvK++YlAfMiFm6ePJHS4sQpvoxHIWv5 yDycGl0hc+pzO8icM1ayTFh8Ei+Txv69QKdUC8rTdiqvFh4/Le4dbh4rcmP3EXb5 JMaeIuuB7Pvvm2YXoRjz0HhIG6874lci7YX0fS/+IbkSuadd4F6TOiMnFNnO9IuC jvu9/f/+HA3e7meFA4Ori4TKW6UALPgpl9X6ohCzFDRVD7kHHmmWn4sCgcnovr8Q BJZCapHtS7cS6vGHk0auj2wLgeEUbyRGhI3F1WPIm/+e6y+cAiWqBmUBjVTOp5S+ KZEtw/BaRjFbgx97hwB+QA0AY8yzevAQMdyzqanUNhGCfWp3WfChUNESmRdrNUWy HDu7kphbN9EUETBHBEdA7ZE4qsP+70a6JTJ+SZ+7vB+YkrOabLU= =kM8d -----END PGP SIGNATURE-----

Trust: 2.88

sources: NVD: CVE-2018-4193 // JVNDB: JVNDB-2018-005822 // ZDI: ZDI-18-1320 // BID: 107135 // VULHUB: VHN-134224 // VULMON: CVE-2018-4193 // PACKETSTORM: 148642 // PACKETSTORM: 148015

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.13.5

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.11.6

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.12.6

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.13.4

Trust: 0.8

vendor:applemodel:macosscope: - version: -

Trust: 0.7

vendor:applemodel:mac os xscope:eqversion:10.7.1

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.7.2

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.6.8

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.7.3

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.6.4

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.9.1

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.9

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.6.6

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.6.7

Trust: 0.6

vendor:applemodel:mac os xscope:eqversion:10.8.2

Trust: 0.6

vendor:applemodel:macosscope:neversion:10.13.5

Trust: 0.3

vendor:applemodel:macos security updatescope:neversion:2018

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.13.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.6

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.6

Trust: 0.3

sources: ZDI: ZDI-18-1320 // BID: 107135 // JVNDB: JVNDB-2018-005822 // CNNVD: CNNVD-201806-624 // NVD: CVE-2018-4193

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-4193
value: HIGH

Trust: 1.0

NVD: CVE-2018-4193
value: HIGH

Trust: 0.8

ZDI: CVE-2018-4193
value: MEDIUM

Trust: 0.7

CNNVD: CNNVD-201806-624
value: HIGH

Trust: 0.6

VULHUB: VHN-134224
value: HIGH

Trust: 0.1

VULMON: CVE-2018-4193
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-4193
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

ZDI: CVE-2018-4193
severity: MEDIUM
baseScore: 4.4
vectorString: AV:L/AC:M/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.4
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.7

VULHUB: VHN-134224
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-4193
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: ZDI: ZDI-18-1320 // VULHUB: VHN-134224 // VULMON: CVE-2018-4193 // JVNDB: JVNDB-2018-005822 // CNNVD: CNNVD-201806-624 // NVD: CVE-2018-4193

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-134224 // JVNDB: JVNDB-2018-005822 // NVD: CVE-2018-4193

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201806-624

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201806-624

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-005822

EXPLOIT AVAILABILITY
sources:
            
            
            VULMON: CVE-2018-4193

PATCH
title:HT208849url:https://support.apple.com/en-us/HT208849
Trust: 1.5
title:HT208849url:https://support.apple.com/ja-jp/HT208849
Trust: 0.8
title:Apple macOS High Sierra Windows Server Security hole Repair measuresurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=80818
Trust: 0.6
title:CVE-2018-4193url:https://github.com/Synacktiv/CVE-2018-4193 
Trust: 0.1
title:P2O_2018url:https://github.com/ret2/P2O_2018 
Trust: 0.1
title:CVE-POCurl:https://github.com/0xT11/CVE-POC 
Trust: 0.1
title:PoC-in-GitHuburl:https://github.com/developer3000S/PoC-in-GitHub 
Trust: 0.1
title:PoC-in-GitHuburl:https://github.com/nomi-sec/PoC-in-GitHub 
Trust: 0.1
title:PoC-in-GitHuburl:https://github.com/hectorgie/PoC-in-GitHub 
Trust: 0.1
sources:
            
            
            ZDI: ZDI-18-1320 // 
            
            
            
            VULMON: CVE-2018-4193 // 
            
            
            
            JVNDB: JVNDB-2018-005822 // 
            
            
            
            CNNVD: CNNVD-201806-624

EXTERNAL IDS
db:NVDid:CVE-2018-4193
Trust: 3.8
db:BIDid:107135
Trust: 2.1
db:EXPLOIT-DBid:46428
Trust: 2.1
db:SECTRACKid:1041027
Trust: 1.8
db:JVNid:JVNVU98864649
Trust: 0.8
db:JVNDBid:JVNDB-2018-005822
Trust: 0.8
db:ZDI_CANid:ZDI-CAN-5813
Trust: 0.7
db:ZDIid:ZDI-18-1320
Trust: 0.7
db:PACKETSTORMid:151778
Trust: 0.7
db:CNNVDid:CNNVD-201806-624
Trust: 0.7
db:NSFOCUSid:43683
Trust: 0.6
db:VULHUBid:VHN-134224
Trust: 0.1
db:VULMONid:CVE-2018-4193
Trust: 0.1
db:PACKETSTORMid:148642
Trust: 0.1
db:PACKETSTORMid:148015
Trust: 0.1
sources:
            
            
            ZDI: ZDI-18-1320 // 
            
            
            
            VULHUB: VHN-134224 // 
            
            
            
            VULMON: CVE-2018-4193 // 
            
            
            
            BID: 107135 // 
            
            
            
            JVNDB: JVNDB-2018-005822 // 
            
            
            
            PACKETSTORM: 148642 // 
            
            
            
            PACKETSTORM: 148015 // 
            
            
            
            CNNVD: CNNVD-201806-624 // 
            
            
            
            NVD: CVE-2018-4193

REFERENCES
url:http://www.securityfocus.com/bid/107135
Trust: 1.9
url:https://support.apple.com/ht208849
Trust: 1.8
url:https://www.exploit-db.com/exploits/46428/
Trust: 1.8
url:http://www.securitytracker.com/id/1041027
Trust: 1.8
url:https://support.apple.com/en-us/ht208849
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2018-4193
Trust: 1.0
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-4193
Trust: 0.8
url:https://jvn.jp/vu/jvnvu98864649/index.html
Trust: 0.8
url:https://packetstormsecurity.com/files/151778/apple-macos-10.13.5-local-privilege-escalation.html
Trust: 0.6
url:http://www.nsfocus.net/vulndb/43683
Trust: 0.6
url:https://www.exploit-db.com/exploits/46428
Trust: 0.4
url:https://www.apple.com/
Trust: 0.3
url:https://github.com/synacktiv/cve-2018-4193/blob/master/exploit.m
Trust: 0.3
url:https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/46428.zip
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4225
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4219
Trust: 0.2
url:https://support.apple.com/kb/ht201222
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4249
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4235
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4184
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4230
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4141
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4228
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4202
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4243
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4224
Trust: 0.2
url:https://support.apple.com/downloads/
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4198
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4196
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4229
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4234
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4159
Trust: 0.2
url:https://www.apple.com/support/security/pgp/
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4240
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4237
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4221
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4223
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4236
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4226
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4242
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4227
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4211
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4241
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-4171
Trust: 0.2
url:https://cwe.mitre.org/data/definitions/119.html
Trust: 0.1
url:https://github.com/synacktiv/cve-2018-4193
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            ZDI: ZDI-18-1320 // 
            
            
            
            VULHUB: VHN-134224 // 
            
            
            
            VULMON: CVE-2018-4193 // 
            
            
            
            BID: 107135 // 
            
            
            
            JVNDB: JVNDB-2018-005822 // 
            
            
            
            PACKETSTORM: 148642 // 
            
            
            
            PACKETSTORM: 148015 // 
            
            
            
            CNNVD: CNNVD-201806-624 // 
            
            
            
            NVD: CVE-2018-4193

CREDITS
Richard Zhu (fluorescence)
Trust: 0.7
sources:
            
            
            ZDI: ZDI-18-1320

SOURCES
db:ZDIid:ZDI-18-1320
db:VULHUBid:VHN-134224
db:VULMONid:CVE-2018-4193
db:BIDid:107135
db:JVNDBid:JVNDB-2018-005822
db:PACKETSTORMid:148642
db:PACKETSTORMid:148015
db:CNNVDid:CNNVD-201806-624
db:NVDid:CVE-2018-4193

LAST UPDATE DATE
2024-11-23T20:52:46.195000+00:00

SOURCES UPDATE DATE
db:ZDIid:ZDI-18-1320date:2018-10-30T00:00:00
db:VULHUBid:VHN-134224date:2019-02-26T00:00:00
db:VULMONid:CVE-2018-4193date:2019-02-26T00:00:00
db:BIDid:107135date:2019-02-16T00:00:00
db:JVNDBid:JVNDB-2018-005822date:2018-07-31T00:00:00
db:CNNVDid:CNNVD-201806-624date:2019-07-17T00:00:00
db:NVDid:CVE-2018-4193date:2024-11-21T04:06:56.643

SOURCES RELEASE DATE
db:ZDIid:ZDI-18-1320date:2018-10-30T00:00:00
db:VULHUBid:VHN-134224date:2018-06-08T00:00:00
db:VULMONid:CVE-2018-4193date:2018-06-08T00:00:00
db:BIDid:107135date:2019-02-16T00:00:00
db:JVNDBid:JVNDB-2018-005822date:2018-07-31T00:00:00
db:PACKETSTORMid:148642date:2018-07-23T13:02:22
db:PACKETSTORMid:148015date:2018-06-01T18:32:22
db:CNNVDid:CNNVD-201806-624date:2018-06-11T00:00:00
db:NVDid:CVE-2018-4193date:2018-06-08T18:29:00.603