製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の Apple 製品の Security コンポーネントにおけるバッファオーバーフローの脆弱性

Title	複数の Apple 製品の Security コンポーネントにおけるバッファオーバーフローの脆弱性
Summary	複数の Apple 製品の Security コンポーネントには、バッファオーバーフローの脆弱性が存在します。
Possible impacts	攻撃者により、巧妙に細工されたアプリケーションを介して、特権付きコンテキスト内で任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 29, 2018, midnight
Registration Date	June 1, 2018, 2:33 p.m.
Last Update	June 1, 2018, 2:33 p.m.

Affected System

アップル

Apple Mac OS X 10.11.6

Apple Mac OS X 10.12.6

Apple Mac OS X 10.13.3

iCloud 7.4 未満 (Windows 7 以降)

iOS 11.3 未満 (iPad Air 以降)

iOS 11.3 未満 (iPhone 5s 以降)

iOS 11.3 未満 (iPod touch 第 6 世代)

iTunes for Windows 12.7.4 未満 (Windows 7 以降)

tvOS 11.3 未満 (Apple TV 4K)

tvOS 11.3 未満 (Apple TV 第 4 世代)

watchOS 4.3 未満 (Apple Watch の全モデル)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2018-4144	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4144
National Vulnerability Database (NVD)
2	CVE-2018-4144	https://nvd.nist.gov/vuln/detail/CVE-2018-4144

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT208692	https://support.apple.com/en-us/HT208692
2	HT208693	https://support.apple.com/en-us/HT208693
3	HT208694	https://support.apple.com/en-us/HT208694
4	HT208696	https://support.apple.com/en-us/HT208696
5	HT208697	https://support.apple.com/en-us/HT208697
6	HT208698	https://support.apple.com/en-us/HT208698
Apple セキュリティアップデート
7	HT208692	https://support.apple.com/ja-jp/HT208692
8	HT208693	https://support.apple.com/ja-jp/HT208693
9	HT208694	https://support.apple.com/ja-jp/HT208694
10	HT208696	https://support.apple.com/ja-jp/HT208696
11	HT208697	https://support.apple.com/ja-jp/HT208697
12	HT208698	https://support.apple.com/ja-jp/HT208698

その他

No	Name	URL
JVN
1	JVNVU#92378299	http://jvn.jp/vu/JVNVU92378299/index.html

Change Log

No	Changed Details	Date of change
1	[2018年06月01日] 掲載	June 1, 2018, 2:33 p.m.

NVD Vulnerability Information

CVE-2018-4144

Summary	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Security" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.
Publication Date	April 3, 2018, 3:29 p.m.
Registration Date	March 1, 2021, 7:27 p.m.
Last Update	Nov. 21, 2024, 1:06 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/103582	Third Party Advisory VDB Entry
2	http://www.securityfocus.com/bid/103582	Third Party Advisory VDB Entry
3	http://www.securitytracker.com/id/1040604	Third Party Advisory VDB Entry
4	http://www.securitytracker.com/id/1040604	Third Party Advisory VDB Entry
5	http://www.securitytracker.com/id/1040608	Third Party Advisory VDB Entry
6	http://www.securitytracker.com/id/1040608	Third Party Advisory VDB Entry
7	https://support.apple.com/HT208692	Vendor Advisory
8	https://support.apple.com/HT208692	Vendor Advisory
9	https://support.apple.com/HT208693	Vendor Advisory
10	https://support.apple.com/HT208693	Vendor Advisory
11	https://support.apple.com/HT208694	Vendor Advisory
12	https://support.apple.com/HT208694	Vendor Advisory
13	https://support.apple.com/HT208696	Vendor Advisory
14	https://support.apple.com/HT208696	Vendor Advisory
15	https://support.apple.com/HT208697	Vendor Advisory
16	https://support.apple.com/HT208697	Vendor Advisory
17	https://support.apple.com/HT208698	Vendor Advisory
18	https://support.apple.com/HT208698	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html