CVE-2018-4089
gir1.2-javascriptcoregtk-4.0: An issue was discovered in certain Apple products
CVE-2018-4089 is fixed in 6 products on 1 platform, first by gir1.2-javascriptcoregtk-4.0 2.18.4-1, released April 2, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0639
93rd percentile
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-javascriptcoregtk-4.0 · Ubuntu 18.04.6 LTS (bionic) | 2.18.4-1 | gir1.2-javascriptcoregtk-4.0 2.18.4-1 | Apr 2, 2018 |
| gir1.2-webkit2-4.0 · Ubuntu 18.04.6 LTS (bionic) | 2.18.4-1 | gir1.2-webkit2-4.0 2.18.4-1 | Apr 2, 2018 |
| libjavascriptcoregtk-4.0-18 · Ubuntu 18.04.6 LTS (bionic) | 2.18.4-1 | libjavascriptcoregtk-4.0-18 2.18.4-1 | Apr 2, 2018 |
| libjavascriptcoregtk-4.0-bin · Ubuntu 18.04.6 LTS (bionic) | 2.18.4-1 | libjavascriptcoregtk-4.0-bin 2.18.4-1 | Apr 2, 2018 |
| libwebkit2gtk-4.0-37 · Ubuntu 18.04.6 LTS (bionic) | 2.18.4-1 | libwebkit2gtk-4.0-37 2.18.4-1 | Apr 2, 2018 |
| libwebkit2gtk-4.0-37-gtk2 · Ubuntu 18.04.6 LTS (bionic) | 2.18.4-1 | libwebkit2gtk-4.0-37-gtk2 2.18.4-1 | Apr 2, 2018 |