CVE-2018-4176

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image.

Score

CVSS 3.0 5.5 Medium

Status

Modified - product-security@apple.com

Published

2018-04-03

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Mac Os X (Apple)

References

• http://www.securityfocus.com/bid/103582
• http://www.securitytracker.com/id/1040608
• https://support.apple.com/HT208692