Уязвимость обхода ограничений чтения памяти в компоненте WebKit через специально созданное приложение в Apple iOS, Safari, iCloud и iTunes
Описание
Обнаружена уязвимость в компоненте WebKit некоторых продуктов Apple. Эта уязвимость позволяет злоумышленникам обойти установленные ограничения на чтение памяти посредством созданного приложения.
Затронутые версии ПО
- iOS до версии 10.3.3
- Safari до версии 10.1.2
- iCloud до версии 6.2.2 на Windows
- iTunes до версии 12.6.2 на Windows
Тип уязвимости
Обход ограничений доступа к памяти
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Одновременно
Одно из
Одновременно
EPSS
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
An issue was discovered in certain Apple products. iOS before 10.3.3 i ...
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
EPSS
5.5 Medium
CVSS3
4.3 Medium
CVSS2