Vulnerabilities > CVE-2018-4347 - Use After Free vulnerability in Apple products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

nessus

NVD

Published: 2019-04-03

Updated: 2024-11-21

Summary

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple MAC OS X - Apple MAC OS X 10.0 Apple MAC OS X 10.0.0 Apple MAC OS X 10.0.1 Apple MAC OS X 10.0.2 Apple MAC OS X 10.0.3 Apple MAC OS X 10.0.4 Apple MAC OS X 10.1 Apple MAC OS X 10.1.0 Apple MAC OS X 10.1.1 Apple MAC OS X 10.1.2 Apple MAC OS X 10.1.3 Apple MAC OS X 10.1.4 Apple MAC OS X 10.1.5 Apple MAC OS X 10.2 Apple MAC OS X 10.2.0 Apple MAC OS X 10.2.1 Apple MAC OS X 10.2.2 Apple MAC OS X 10.2.3 Apple MAC OS X 10.2.4 Apple MAC OS X 10.2.5 Apple MAC OS X 10.2.6 Apple MAC OS X 10.2.7 Apple MAC OS X 10.2.8 Apple MAC OS X 10.3 Apple MAC OS X 10.3.0 Apple MAC OS X 10.3.1 Apple MAC OS X 10.3.2 Apple MAC OS X 10.3.3 Apple MAC OS X 10.3.4 Apple MAC OS X 10.3.5 Apple MAC OS X 10.3.6 Apple MAC OS X 10.3.7 Apple MAC OS X 10.3.8 Apple MAC OS X 10.3.9 Apple MAC OS X 10.4 Apple MAC OS X 10.4.0 Apple MAC OS X 10.4.1 Apple MAC OS X 10.4.2 Apple MAC OS X 10.4.3 Apple MAC OS X 10.4.4 Apple MAC OS X 10.4.5 Apple MAC OS X 10.4.6 Apple MAC OS X 10.4.7 Apple MAC OS X 10.4.8 Apple MAC OS X 10.4.9 Apple MAC OS X 10.4.10 Apple MAC OS X 10.4.11 Apple MAC OS X 10.5 Apple MAC OS X 10.5.0 Apple MAC OS X 10.5.1 Apple MAC OS X 10.5.2 Apple MAC OS X 10.5.3 Apple MAC OS X 10.5.4 Apple MAC OS X 10.5.5 Apple MAC OS X 10.5.6 Apple MAC OS X 10.5.7 Apple MAC OS X 10.5.8 Apple MAC OS X 10.6.0 Apple MAC OS X 10.6.1 Apple MAC OS X 10.6.2 Apple MAC OS X 10.6.3 Apple MAC OS X 10.6.4 Apple MAC OS X 10.6.5 Apple MAC OS X 10.6.6 Apple MAC OS X 10.6.7 Apple MAC OS X 10.6.8 Apple MAC OS X 10.7.0 Apple MAC OS X 10.7.1 Apple MAC OS X 10.7.2 Apple MAC OS X 10.7.3 Apple MAC OS X 10.7.4 Apple MAC OS X 10.7.5 Apple MAC OS X 10.8.0 Apple MAC OS X 10.8.1 Apple MAC OS X 10.8.2 Apple MAC OS X 10.8.3 Apple MAC OS X 10.8.4 Apple MAC OS X 10.8.5 Apple MAC OS X 10.9 Apple MAC OS X 10.9.1 Apple MAC OS X 10.9.2 Apple MAC OS X 10.9.3 Apple MAC OS X 10.9.4 Apple MAC OS X 10.9.5 Apple MAC OS X 10.10.0 Apple MAC OS X 10.10.1 Apple MAC OS X 10.10.2 Apple MAC OS X 10.10.3 Apple MAC OS X 10.10.4 Apple MAC OS X 10.10.5 Apple MAC OS X 10.11.0 Apple MAC OS X 10.11.1 Apple MAC OS X 10.11.2 Apple MAC OS X 10.11.3 Apple MAC OS X 10.11.4 Apple MAC OS X 10.11.5 Apple MAC OS X 10.11.6 Apple MAC OS X 10.12 Apple MAC OS X 10.12.0 Apple MAC OS X 10.12.1 Apple MAC OS X 10.12.2 Apple MAC OS X 10.12.3 Apple MAC OS X 10.12.4 Apple MAC OS X 10.12.5 Apple MAC OS X 10.12.6 Apple MAC OS X 10.13 Apple MAC OS X 10.13.0 Apple MAC OS X 10.13.1 Apple MAC OS X 10.13.2 Apple MAC OS X 10.13.3 Apple MAC OS X 10.13.4 Apple MAC OS X 10.13.5 Apple MAC OS X 10.13.6 Apple Watchos - Apple Watchos 1.0 Apple Watchos 1.0.1 Apple Watchos 2.0 Apple Watchos 2.0.1 Apple Watchos 2.1 Apple Watchos 2.2 Apple Watchos 2.2.0 Apple Watchos 2.2.1 Apple Watchos 2.2.2 Apple Watchos 3.0 Apple Watchos 3.1 Apple Watchos 3.1.1 Apple Watchos 3.1.3 Apple Watchos 3.2 Apple Watchos 3.2.2 Apple Watchos 3.2.3 Apple Watchos 4 Apple Watchos 4.0 Apple Watchos 4.0.1 Apple Watchos 4.1 Apple Watchos 4.2 Apple Watchos 4.2.3 Apple Watchos 4.3 Apple Watchos 4.3.1 Apple Watchos 4.3.2 Apple Iphone OS - Apple Iphone OS 1.0.0 Apple Iphone OS 1.0.1 Apple Iphone OS 1.0.2 Apple Iphone OS 1.1.0 Apple Iphone OS 1.1.1 Apple Iphone OS 1.1.2 Apple Iphone OS 1.1.3 Apple Iphone OS 1.1.4 Apple Iphone OS 1.1.5 Apple Iphone OS 2.0 Apple Iphone OS 2.0.0 Apple Iphone OS 2.0.1 Apple Iphone OS 2.0.2 Apple Iphone OS 2.1 Apple Iphone OS 2.1.1 Apple Iphone OS 2.2 Apple Iphone OS 2.2.1 Apple Iphone OS 3.0 Apple Iphone OS 3.0.1 Apple Iphone OS 3.1 Apple Iphone OS 3.1.1 Apple Iphone OS 3.1.2 Apple Iphone OS 3.1.3 Apple Iphone OS 3.2 Apple Iphone OS 3.2.1 Apple Iphone OS 3.2.2 Apple Iphone OS 4.0 Apple Iphone OS 4.0.1 Apple Iphone OS 4.0.2 Apple Iphone OS 4.1 Apple Iphone OS 4.2 Apple Iphone OS 4.2.1 Apple Iphone OS 4.2.5 Apple Iphone OS 4.2.6 Apple Iphone OS 4.2.7 Apple Iphone OS 4.2.8 Apple Iphone OS 4.2.9 Apple Iphone OS 4.2.10 Apple Iphone OS 4.3.0 Apple Iphone OS 4.3.1 Apple Iphone OS 4.3.2 Apple Iphone OS 4.3.3 Apple Iphone OS 4.3.4 Apple Iphone OS 4.3.5 Apple Iphone OS 5.0 Apple Iphone OS 5.0.1 Apple Iphone OS 5.1 Apple Iphone OS 5.1.1 Apple Iphone OS 6.0 Apple Iphone OS 6.0.1 Apple Iphone OS 6.0.2 Apple Iphone OS 6.1 Apple Iphone OS 6.1.2 Apple Iphone OS 6.1.3 Apple Iphone OS 6.1.4 Apple Iphone OS 6.1.5 Apple Iphone OS 6.1.6 Apple Iphone OS 7.0 Apple Iphone OS 7.0.1 Apple Iphone OS 7.0.2 Apple Iphone OS 7.0.3 Apple Iphone OS 7.0.4 Apple Iphone OS 7.0.5 Apple Iphone OS 7.0.6 Apple Iphone OS 7.1 Apple Iphone OS 7.1.1 Apple Iphone OS 7.1.2 Apple Iphone OS 8.0 Apple Iphone OS 8.0.1 Apple Iphone OS 8.0.2 Apple Iphone OS 8.1 Apple Iphone OS 8.1.1 Apple Iphone OS 8.1.2 Apple Iphone OS 8.1.3 Apple Iphone OS 8.2 Apple Iphone OS 8.3 Apple Iphone OS 8.4 Apple Iphone OS 8.4.1 Apple Iphone OS 9.0 Apple Iphone OS 9.0.1 Apple Iphone OS 9.0.2 Apple Iphone OS 9.1 Apple Iphone OS 9.2 Apple Iphone OS 9.2.1 Apple Iphone OS 9.3 Apple Iphone OS 9.3.1 Apple Iphone OS 9.3.2 Apple Iphone OS 9.3.3 Apple Iphone OS 9.3.4 Apple Iphone OS 9.3.5 Apple Iphone OS 9.3.6 Apple Iphone OS 10.0 Apple Iphone OS 10.0.1 Apple Iphone OS 10.0.2 Apple Iphone OS 10.0.3 Apple Iphone OS 10.1 Apple Iphone OS 10.1.1 Apple Iphone OS 10.2 Apple Iphone OS 10.2.1 Apple Iphone OS 10.3 Apple Iphone OS 10.3.1 Apple Iphone OS 10.3.2 Apple Iphone OS 10.3.3 Apple Iphone OS 10.3.4 Apple Iphone OS 11 Apple Iphone OS 11.0 Apple Iphone OS 11.0.1 Apple Iphone OS 11.0.2 Apple Iphone OS 11.0.3 Apple Iphone OS 11.1 Apple Iphone OS 11.1.1 Apple Iphone OS 11.1.2 Apple Iphone OS 11.2 Apple Iphone OS 11.2.1 Apple Iphone OS 11.2.2 Apple Iphone OS 11.2.5 Apple Iphone OS 11.2.6 Apple Iphone OS 11.3 Apple Iphone OS 11.3.1 Apple Iphone OS 11.4 Apple Iphone OS 11.4.1 Apple Tvos - Apple Tvos 1.0.0 Apple Tvos 1.1.0 Apple Tvos 2.0.0 Apple Tvos 2.0.1 Apple Tvos 2.0.2 Apple Tvos 2.1.0 Apple Tvos 2.2.0 Apple Tvos 2.3.0 Apple Tvos 2.3.1 Apple Tvos 2.4.0 Apple Tvos 3.0.0 Apple Tvos 3.0.1 Apple Tvos 3.0.2 Apple Tvos 4.1.0 Apple Tvos 4.1.1 Apple Tvos 4.2.0 Apple Tvos 4.2.1 Apple Tvos 4.2.2 Apple Tvos 4.3.0 Apple Tvos 4.4.0 Apple Tvos 4.4.2 Apple Tvos 4.4.3 Apple Tvos 4.4.4 Apple Tvos 5.0.0 Apple Tvos 5.0.1 Apple Tvos 5.0.2 Apple Tvos 5.1.0 Apple Tvos 5.1.1 Apple Tvos 5.2.0 Apple Tvos 6.0 Apple Tvos 6.0.1 Apple Tvos 6.0.2 Apple Tvos 6.1 Apple Tvos 6.1.1 Apple Tvos 6.1.2 Apple Tvos 6.2 Apple Tvos 6.2.1 Apple Tvos 7.0 Apple Tvos 7.0.1 Apple Tvos 7.0.2 Apple Tvos 7.0.3 Apple Tvos 7.1 Apple Tvos 9.0 Apple Tvos 9.0.1 Apple Tvos 9.1 Apple Tvos 9.1.1 Apple Tvos 9.2 Apple Tvos 9.2.1 Apple Tvos 9.2.2 Apple Tvos 10.0 Apple Tvos 10.0.1 Apple Tvos 10.1 Apple Tvos 10.1.1 Apple Tvos 10.2 Apple Tvos 10.2.1 Apple Tvos 10.2.2 Apple Tvos 10.3 Apple Tvos 11 Apple Tvos 11.0 Apple Tvos 11.1 Apple Tvos 11.2 Apple Tvos 11.2.1 Apple Tvos 11.2.6 Apple Tvos 11.3 Apple Tvos 11.4.1	423
OS	Microsoft Microsoft Windows -	1
Application	Apple Apple Icloud - Apple Icloud 5.2 Apple Icloud 5.2.1 Apple Icloud 6.0 Apple Icloud 6.0.1 Apple Icloud 6.1 Apple Icloud 6.1.1 Apple Icloud 6.2 Apple Icloud 6.2.2 Apple Icloud 7.0 Apple Icloud 7.1 Apple Icloud 7.2 Apple Icloud 7.3 Apple Icloud 7.4 Apple Icloud 7.5 Apple Icloud 7.6 Apple Itunes - Apple Itunes 4.0.0 Apple Itunes 4.0.1 Apple Itunes 4.1.0 Apple Itunes 4.2.0 Apple Itunes 4.5 Apple Itunes 4.5.0 Apple Itunes 4.6 Apple Itunes 4.6.0 Apple Itunes 4.7 Apple Itunes 4.7.0 Apple Itunes 4.7.1 Apple Itunes 4.7.2 Apple Itunes 4.8.0 Apple Itunes 4.9.0 Apple Itunes 5.0 Apple Itunes 5.0.0 Apple Itunes 5.0.1 Apple Itunes 6.0.0 Apple Itunes 6.0.1 Apple Itunes 6.0.2 Apple Itunes 6.0.3 Apple Itunes 6.0.4 Apple Itunes 6.0.5 Apple Itunes 7.0.0 Apple Itunes 7.0.1 Apple Itunes 7.0.2 Apple Itunes 7.1.0 Apple Itunes 7.1.1 Apple Itunes 7.2.0 Apple Itunes 7.3.0 Apple Itunes 7.3.1 Apple Itunes 7.3.2 Apple Itunes 7.4 Apple Itunes 7.4.0 Apple Itunes 7.4.1 Apple Itunes 7.4.2 Apple Itunes 7.4.3 Apple Itunes 7.5 Apple Itunes 7.5.0 Apple Itunes 7.6 Apple Itunes 7.6.0 Apple Itunes 7.6.1 Apple Itunes 7.6.2 Apple Itunes 7.7 Apple Itunes 7.7.0 Apple Itunes 7.7.1 Apple Itunes 8.0.0 Apple Itunes 8.0.1 Apple Itunes 8.1 Apple Itunes 9.0.0 Apple Itunes 9.0.1 Apple Itunes 9.0.2 Apple Itunes 9.0.3 Apple Itunes 9.1 Apple Itunes 9.1.1 Apple Itunes 9.2 Apple Itunes 9.2.1 Apple Itunes 10.0 Apple Itunes 10.0.1 Apple Itunes 10.1 Apple Itunes 10.1.1 Apple Itunes 10.1.1.4 Apple Itunes 10.1.2 Apple Itunes 10.2 Apple Itunes 10.2.2.12 Apple Itunes 10.3 Apple Itunes 10.3.1 Apple Itunes 10.4 Apple Itunes 10.4.0.80 Apple Itunes 10.4.1 Apple Itunes 10.4.1.10 Apple Itunes 10.5 Apple Itunes 10.5.1 Apple Itunes 10.5.1.42 Apple Itunes 10.5.2 Apple Itunes 10.5.3 Apple Itunes 10.6 Apple Itunes 10.6.1 Apple Itunes 10.6.3 Apple Itunes 10.7 Apple Itunes 11.0 Apple Itunes 11.0.1 Apple Itunes 11.0.2 Apple Itunes 11.0.3 Apple Itunes 11.0.4 Apple Itunes 11.0.5 Apple Itunes 11.1 Apple Itunes 11.1.1 Apple Itunes 11.1.2 Apple Itunes 11.1.3 Apple Itunes 11.1.4 Apple Itunes 11.1.5 Apple Itunes 11.2 Apple Itunes 11.2.1 Apple Itunes 12.0 Apple Itunes 12.0.0 Apple Itunes 12.0.1 Apple Itunes 12.0.4 Apple Itunes 12.1 Apple Itunes 12.1.1 Apple Itunes 12.1.2 Apple Itunes 12.1.3 Apple Itunes 12.2 Apple Itunes 12.2.1 Apple Itunes 12.2.2 Apple Itunes 12.3 Apple Itunes 12.3.0 Apple Itunes 12.3.1 Apple Itunes 12.4 Apple Itunes 12.4.1 Apple Itunes 12.4.2 Apple Itunes 12.4.3 Apple Itunes 12.5 Apple Itunes 12.5.0 Apple Itunes 12.5.1 Apple Itunes 12.5.2 Apple Itunes 12.5.3 Apple Itunes 12.5.4 Apple Itunes 12.5.5 Apple Itunes 12.5.5.5 Apple Itunes 12.6 Apple Itunes 12.6.1 Apple Itunes 12.6.2 Apple Itunes 12.6.3 Apple Itunes 12.7 Apple Itunes 12.7.1 Apple Itunes 12.7.2 Apple Itunes 12.7.3 Apple Itunes 12.7.4 Apple Itunes 12.7.5 Apple Itunes 12.8	250

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Nessus

NASL family	MacOS X Local Security Checks
NASL id	MACOS_10_14.NASL
description	The remote host is running a version of Mac OS X that is prior to 10.13.6 or is not macOS 10.14. It is, therefore, affected by multiple vulnerabilities in the following components : - afpserver - AppleGraphicsControl - Application Firewall - App Store - APR - ATS - Auto Unlock - Bluetooth - CFNetwork - CoreFoundation - CoreText - Crash Reporter - CUPS - Dictionary - Grand Central Dispatch - Heimdal - Hypervisor - iBooks - Intel Graphics Driver - IOHIDFamily - IOKit - IOUserEthernet - Kernel - LibreSSL - Login Window - mDNSOffloadUserClient - MediaRemote - Microcode - Security - Spotlight - Symptom Framework - Text - Wi-Fi Note that successful exploitation of the most serious issues can result in arbitrary code execution.
last seen	2020-06-01
modified	2020-06-02
plugin id	118178
published	2018-10-18
reporter	This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/118178
title	macOS < 10.14 Multiple Vulnerabilities

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.