CVE-2018-4113

MEDIUM Year: 2018
CVSS v3 Score
6.5
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-617
View all →

Vulnerability Description

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore function in the "WebKit" component. It allows attackers to trigger an assertion failure by leveraging improper array indexing.

Related Vulnerabilities

CVE-2006-6811

MEDIUM
CVSS:6.5(Medium)

KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and result...

CWE-6172006

CVE-2012-5521

MEDIUM
CVSS:6.5(Medium)

quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal

CWE-6172012

CVE-2017-11368

MEDIUM
CVSS:6.5(Medium)

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

CWE-6172017

CVE-2017-11524

MEDIUM
CVSS:6.5(Medium)

The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a cr...

CWE-6172017

CVE-2017-11683

MEDIUM
CVSS:6.5(Medium)

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.

CWE-6172017

CVE-2017-12434

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyIma...

CWE-6172017