PT-2019-10809 · Apple · Itunes For Windows+4

Publicado 2019-01-11 · Atualizado 2019-01-17 · CVE-2018-4147

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iCloud for Windows versions prior to 7.3 Safari versions prior to 11.0.3 iTunes for Windows versions prior to 12.7.3 iOS versions prior to 11.2.5

Description Multiple memory corruption issues were found, which have been addressed with improved memory handling.

Recommendations For iCloud for Windows versions prior to 7.3, update to version 7.3 or later. For Safari versions prior to 11.0.3, update to version 11.0.3 or later. For iTunes for Windows versions prior to 12.7.3, update to version 12.7.3 or later. For iOS versions prior to 11.2.5, update to version 11.2.5 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-4147

Produtos afetados

Safari

Icloud For Windows

Ios

Itunes

Itunes For Windows

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-4147 · Nota de Segurança
• https://support.apple.com/HT208475 · Aviso do Fabricante
• https://support.apple.com/HT208473 · Aviso do Fabricante
• https://support.apple.com/HT208474 · Aviso do Fabricante
• https://support.apple.com/HT208465 · Aviso do Fabricante
• https://support.apple.com/HT208463 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-4147 · Aviso do Fabricante