Apple MacOS 10.13.4 - Denial of Service (PoC)

vendor:

MacOS

by:

Sriram

6.5

CVSS

MEDIUM

Denial of Service

CWE

Product Name: MacOS

Affected Version From: macOS High Sierra 10.13.4

Affected Version To:

Patch Exists: NO

Related CWE: CVE-2018-4240

CPE:

Metasploit: https://www.rapid7.com/db/vulnerabilities/apple-osx-messages-cve-2018-4240/, https://www.rapid7.com/db/vulnerabilities/ubuntu-cve-2018-8828/

Other Scripts:

Platforms Tested: macOS High Sierra 10.13.4, iOS 11.3, tvOS 11.3, watchOS 4.3.0

2018

Apple MacOS 10.13.4 – Denial of Service (PoC)

Crashing Phone via RLM character. Steps to Reproduce: Run the python script to create a file called "dos_apple.txt" with a payload that will crash the victim's device when copied and pasted into WhatsApp.

Mitigation:

Source

Apple MacOS 10.13.4 – Denial of Service (PoC)

Mitigation:

Exploit-DB raw data: