Описание
Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code and obtain sensitive information.
Below is a complete list of vulnerabilities:
- A buffer overflow vulnerability can be exploited locally to gain privileges;
- Multiple memory corruption vulnerabilities in WebKit can be exploited remotely via specially crafted website to execute arbitrary code;
- Multiple array indexing vulnerabilities in WebKit can be exploited remotely to cause denial of service;
- A cross-origin vulnerability can be exploited remotely to obtain sensitive information;
- Multiple assert failure vulnerabilities in WebKit can be exploited locally to cause denial of service.
Первичный источник обнаружения
Эксплуатация
Public exploits exist for this vulnerability.
Связанные продукты
Список CVE
- CVE-2018-4113 warning
- CVE-2018-4114 high
- CVE-2018-4117 warning
- CVE-2018-4118 high
- CVE-2018-4119 high
- CVE-2018-4120 high
- CVE-2018-4121 high
- CVE-2018-4122 high
- CVE-2018-4125 high
- CVE-2018-4127 high
- CVE-2018-4128 high
- CVE-2018-4129 high
- CVE-2018-4130 high
- CVE-2018-4207 high
- CVE-2018-4208 high
- CVE-2018-4209 high
- CVE-2018-4210 high
- CVE-2018-4212 high
- CVE-2018-4213 high
- CVE-2018-4144 critical
- CVE-2018-4146 warning
- CVE-2018-4161 high
- CVE-2018-4162 high
- CVE-2018-4163 high
- CVE-2018-4165 high
- CVE-2018-4101 high
Смотрите также
Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com
Нашли неточность в описании этой уязвимости? Дайте нам знать!