Main Vulnerability Database Vulnerabilities #VU13155

Memory corruption in macOS - CVE-2018-4193

Published: June 4, 2018

Vulnerability identifier: #VU13155

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-4193

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to boundary error in the Windows Server component. A local attacker can run a specially crafted application, trigger memory corruption and execute arbitrary code with kernel privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

macOS
IBM Watson Explorer Deep Analytics Edition Analytical Components

How to mitigate CVE-2018-4193

Update to version 10.13.4.

IBM Watson Explorer Deep Analytics Edition Analytical Components - update to 12.0.3.16

Links to Public Exploits and PoC-codes

Exploit #1979 - CVE-2018-4193 (exploit for CVE-2018-4193) (March 18, 2020)

External References

https://support.apple.com/en-us/HT208849