RETIRED: Apple iOS APPLE-SA-2018-04-24-1 Multiple Security Vulnerabilities

Bugtraq ID:	103958
Class:	Unknown
CVE:	CVE-2018-4206 CVE-2018-4187
Remote:	Yes
Local:	Yes
Published:	Apr 25 2018 12:00AM
Updated:	Apr 15 2019 10:00PM
Credit:	Ian Beer of Google Project Zero, Zhiyang Zeng (@Wester) of Tencent Security Platform Department, Roman Mueller (@faker_).
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad Air 0 Apple iOS 5 0 Apple iOS 4 0 Apple iOS 3 0 Apple iOS 10.2.1 Apple iOS 10.0.1 Apple iOS 9.3.4 Apple iOS 9.3.3 Apple iOS 9.3.2 Apple iOS 9.3.1 Apple iOS 9.2.1 Apple iOS 9.0.2 Apple iOS 9.0.1 Apple iOS 8.4.1 Apple iOS 7.2 Apple iOS 7.0.6 Apple iOS 7.0.5 Apple iOS 7.0.3 Apple iOS 7.0.2 Apple iOS 7.0.1 Apple iOS 6.3.1 Apple iOS 6.1.6 Apple iOS 6.1.4 Apple iOS 6.1.3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 9.3.5 Apple iOS 9.3 Apple iOS 9.2 Apple iOS 9.1 Apple iOS 9 Apple iOS 8.4 Apple iOS 8.3 Apple iOS 8.2 Apple iOS 8.1.3 Apple iOS 8.1.2 Apple iOS 8.1.1 Apple iOS 8.1 Apple iOS 8 Apple iOS 7.1.2 Apple iOS 7.1.1 Apple iOS 7.1 Apple iOS 7.0.4 Apple iOS 7 Apple iOS 6.1 Apple iOS 6.0.2 Apple iOS 6.0.1 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 Apple iOS 11.3 Apple iOS 11.2.6 Apple iOS 11.2.5 Apple iOS 11.2.2 Apple iOS 11.2.1 Apple iOS 11.2 Apple iOS 11.1 Apple iOS 10.3.3 Apple iOS 10.3.2 Apple iOS 10.3.1 Apple iOS 10.3 Apple iOS 10.2 Apple iOS 10.1 Apple iOS 10
Not Vulnerable:	Apple iOS 11.3.1

RETIRED: Apple iOS APPLE-SA-2018-04-24-1 Multiple Security Vulnerabilities

Apple iOS is prone to multiple security vulnerabilities.

Attackers can exploit these issues to execute arbitrary code and conduct spoofing attacks. Failed exploits will result in denial-of-service condition.

Versions prior to Apple iOS 11.3.1 are vulnerable.

This BID is being retired as a duplicate of BID 103957 Apple iOS and macOS Multiple Security Vulnerabilities.

RETIRED: Apple iOS APPLE-SA-2018-04-24-1 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Apple iOS APPLE-SA-2018-04-24-1 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Apple iOS APPLE-SA-2018-04-24-1 Multiple Security Vulnerabilities

References:

• Apple Home Page (Apple)
  
• Apple iOS Homepage (Apple)
  
• APPLE-SA-2018-04-24-1 iOS 11.3.1 (Apple)