A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT208112 | Vendor Advisory |
https://support.apple.com/en-us/HT208115 | Vendor Advisory |
https://support.apple.com/en-us/HT208141 | Vendor Advisory |
https://support.apple.com/en-us/HT208142 | Vendor Advisory |
https://support.apple.com/en-us/HT208144 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
05 Jan 2022, 20:04
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-476 | |
CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:* cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
First Time |
Apple icloud
Apple watchos Apple mac Os X Apple Apple iphone Os Apple itunes |
|
References | (MISC) https://support.apple.com/en-us/HT208115 - Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT208141 - Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT208144 - Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT208112 - Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT208142 - Vendor Advisory |
23 Dec 2021, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-12-23 20:15
Updated : 2023-12-10 14:09
NVD link : CVE-2018-4302
Mitre link : CVE-2018-4302
CVE.ORG link : CVE-2018-4302
JSON object : View
Products Affected
apple
- icloud
- itunes
- mac_os_x
- iphone_os
- watchos
CWE
CWE-476
NULL Pointer Dereference