CVE-2018-4187

Опубликовано: 08 июн. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message.

Ссылки

http://www.securityfocus.com/bid/103957
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/103958
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040744
Third Party Advisory
VDB Entry
https://support.apple.com/HT208742
Vendor Advisory
https://support.apple.com/HT208743
Vendor Advisory
https://support.apple.com/kb/HT209193
Vendor Advisory
http://www.securityfocus.com/bid/103957
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/103958
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040744
Third Party Advisory
VDB Entry
https://support.apple.com/HT208742
Vendor Advisory
https://support.apple.com/HT208743
Vendor Advisory
https://support.apple.com/kb/HT209193
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 11.3.1 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.13.4 (исключая)

EPSS

Процентиль: 70%

0.00638

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-m35w-m68r-3qr2