PT-2018-1362
CVE-2018-4193
·
Published
2018-06-08
·
Updated
2019-02-26
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 10.13.5
Description
The issue involves the "Windows Server" component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is due to a buffer overflow in memory. The exploitation of this issue may enable an attacker to execute arbitrary code with system privileges or cause a denial of service using a specially crafted application.
Recommendations
For macOS versions prior to 10.13.5, update to version 10.13.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the "Windows Server" component to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾