PT-2018-16519
CVE-2018-4278
·
Publicado
2018-08-06
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 11.1.2
iTunes versions prior to 12.8 for Windows
iOS versions prior to 11.4.1
tvOS versions prior to 11.4.1
iCloud for Windows versions prior to 7.6
Description
The issue allows sound fetched through audio elements to be exfiltrated cross-origin. This was addressed with improved audio taint tracking.
Recommendations
For Safari versions prior to 11.1.2, update to version 11.1.2 or later.
For iTunes versions prior to 12.8 for Windows, update to version 12.8 or later.
For iOS versions prior to 11.4.1, update to version 11.4.1 or later.
For tvOS versions prior to 11.4.1, update to version 11.4.1 or later.
For iCloud for Windows versions prior to 7.6, update to version 7.6 or later.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾