Intrusion PreventionApple.WebKit.QuickTimePluginReplacement.Use.After.Free
Description
This indicates an attack attempt to exploit an Use After Free vulnerability in Apple WebKit.
The vulnerability is due to an error when the vulnerable software attempts to access an object that has been deleted. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.
Affected Products
watchOS 7.3.2 and earlier versions
iOS 14.4.1 and earlier versions
iPadOS 14.4.1 and earlier versions
iOS 12.5.1 and earlier versions
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor's advisory for updates:
https://support.apple.com/en-us/103199
https://support.apple.com/en-us/103200
https://support.apple.com/en-us/103192
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 55491 |
| Created | Apr 09, 2024 |
| Updated | Apr 17, 2024 |
| Risk |
|
| CVE ID | CVE-2021-1879 |
| Known Exploited | Yes |
| Exploit Prediction Score | 0.23% |
| Default Action | drop |
| Active | |
| Affected OS | MacOS, Other |
| Affected App | Apple |