CVE-2018-4187

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message.
References
Link Resource
https://support.apple.com/HT208743 Vendor Advisory
https://support.apple.com/HT208742 Vendor Advisory
http://www.securitytracker.com/id/1040744 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/103958 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/103957 VDB Entry Third Party Advisory
https://support.apple.com/kb/HT209193 Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Information

Published : 2018-06-08 11:29

Updated : 2019-04-12 11:04


NVD link : CVE-2018-4187

Mitre link : CVE-2018-4187


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

apple

  • mac_os_x
  • iphone_os