Home

CVE-2018-4207

Description

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.575

Associated Vulnerability

VulnerabilityOS Platform
Update for iCloud (7.4.0.111)Windows
iCloud 7.4.0.111Windows
Multiple Vulnerabilities are affected in Apple iTunes (X64) 12.7.3Windows
Multiple Vulnerabilities are affected in Apple iTunes 12.7.3Windows
Multiple Vulnerabilities are affected in Apple Safari 11.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 11.0.3Mac
Multiple Vulnerabilities are affected in Apple iTunes For Mac 12.7.3Mac
Web content engine library for GTK+ (USN-3781-1) libwebkit2gtk-4.0-37_2.22.2-0ubuntu0.18.04.1_i386.debLinux
Web content engine library for GTK+ (USN-3781-1) libwebkit2gtk-4.0-37_2.22.2-0ubuntu0.18.04.1_amd64.debLinux
Web content engine library for GTK+ (USN-3781-1) libjavascriptcoregtk-4.0-18_2.22.2-0ubuntu0.18.04.1_i386.debLinux
Web content engine library for GTK+ (USN-3781-1) libjavascriptcoregtk-4.0-18_2.22.2-0ubuntu0.18.04.1_amd64.debLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) libjavascriptcoregtk-4_0-18-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) libjavascriptcoregtk-4_0-18-debuginfo-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) libwebkit2gtk-4_0-37-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) libwebkit2gtk-4_0-37-debuginfo-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) libwebkit2gtk3-lang-2.22.4-2.29.3.noarch.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) typelib-1_0-JavaScriptCore-4_0-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) typelib-1_0-WebKit2-4_0-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) webkit2gtk-4_0-injected-bundles-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) webkit2gtk-4_0-injected-bundles-debuginfo-2.22.4-2.29.3.x86_64.rpmLinux
SUSE-SU-2019:0059-1(SUSE Linux Enterprise Desktop 12-SP4 ) webkit2gtk3-debugsource-2.22.4-2.29.3.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-307345Update for iCloud (7.4.0.111)
PATCH-316162iCloud (7.21.0.23) (Deployment-Only)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234