Published: 08/06/2018 Updated: 07/03/2019

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6

VMScore: 516

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

An issue exists in certain Apple products. iOS prior to 11.4 is affected. Safari prior to 11.1.1 is affected. iCloud prior to 7.5 on Windows is affected. iTunes prior to 12.7.5 on Windows is affected. tvOS prior to 11.4 is affected. watchOS prior to 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote malicious users to execute arbitrary code via a crafted web site that leverages a race condition.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari
apple iphone os
apple watchos
apple tvos
apple icloud
apple itunes

// Load Int library, thanks saelo! load('utiljs'); load('int64js'); // Helpers to convert from float to in a few random places var conva = new ArrayBuffer(8); var convf = new Float64Array(conva); var convi = new Uint32Array(conva); var convi8 = new Uint8Array(conva); var floatarr_magic = new Int64('0x3131313131313131')asDouble(); var floatarr ...

PWN2OWN 2018 - Safari + Root This repo contains exploit code as used by Ret2 Systems at PWN2OWN 2018 It has been released for educational purposes, detailed by a series of blogposts These were used as zero-day exploits against macOS 10133 & Safari/JSC on March 16th, 2018 Contents /jsc - JavaScriptCore Exploit & PoC for CVE-2018-4192 /windowserver - WindowS

Exploits CVE-2018-4192: JSC Array reverse

DGA cyberwtf/2017/08/30/dga-classification-and-detection-for-automated-malware-analysis/ githubcom/philarkwright/DGA-Detection githubcom/exp0se/dga_detector githubcom/jayjacobs/dga-tutorial githubcom/pchaigno/dga-collection githubcom/endgameinc/dga_predict githubcom/exctzo/dga_prediction_model **docs

CWE-362 https://support.apple.com/HT208854 https://support.apple.com/HT208853 https://support.apple.com/HT208852 https://support.apple.com/HT208851 https://support.apple.com/HT208850 https://support.apple.com/HT208848 http://www.securitytracker.com/id/1041029 https://www.exploit-db.com/exploits/45048/https://security.gentoo.org/glsa/201808-04 https://nvd.nist.gov https://www.exploit-db.com/exploits/45048/

CVE-2018-4192

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect