2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:apple:apple_tv:*:*:*:*:*:*:*:*","matchCriteriaId":"9005ABE5-36C6-48BD-8E10-D2DA71462721","versionEndExcluding":"11.2.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"30D86C31-444F-4E66-81EA-2A49975D14C5","versionEndExcluding":"11.2.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"9C8076C1-E629-4293-932D-937DF1218C76","versionEndExcluding":"10.13.3","vulnerable":true},{"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","matchCriteriaId":"7B220B18-4E8A-4D66-A714-671DB312EF68","versionEndExcluding":"4.2.2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the \"Audio\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file."},{"lang":"es","value":"Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.2.5, las versiones de macOS anteriores a la 10.13.3, las versiones de tvOS anteriores a la 11.2.5 y las versiones de watchOS anteriores a la 4.2.2 se han visto afectadas. El problema afecta al componente \"Audio\". Permite que los atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria o cierre inesperado de la aplicación) mediante un archivo de audio manipulado."}],"id":"CVE-2018-4094","lastModified":"2026-06-17T01:58:21.427","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-04-03T06:29:03.610","references":[{"source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102782"},{"source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040265"},{"source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040267"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208462"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208463"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208464"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208465"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102782"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040265"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040267"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208462"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208463"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208464"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208465"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}
|