medium4.3
CVE-2018-4278
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elem…
Impact
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | before 11.1.2 |
| Apple | Iphone Os | before 11.4.1 |
| Apple | Tvos | before 11.4.1 |
| Apple | Icloud | before 7.6 |
| Apple | Itunes | before 12.8 |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04 |
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1041232
- https://security.gentoo.org/glsa/201808-04
- https://support.apple.com/HT208932
- https://support.apple.com/HT208933%2C
- https://support.apple.com/HT208934%2C
- https://support.apple.com/HT208936%2C
- https://support.apple.com/HT208938%2C
- https://usn.ubuntu.com/3743-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/146479
- http://www.securitytracker.com/id/1041232
- https://security.gentoo.org/glsa/201808-04
- https://support.apple.com/HT208932
- https://support.apple.com/HT208933%2C
- https://support.apple.com/HT208934%2C
- https://support.apple.com/HT208936%2C
- https://support.apple.com/HT208938%2C
- https://usn.ubuntu.com/3743-1/