PT-2019-10954 · Apple · Itunes For Windows+6

Publicado 2019-04-03 · Atualizado 2020-10-29 · CVE-2018-4474

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: iCloud for Windows versions prior to 7.7 watchOS versions prior to 5 Safari versions prior to 12 iOS versions prior to 12 iTunes for Windows versions prior to 12.9 tvOS versions prior to 12

Description: A memory consumption issue was addressed with improved memory handling. The issue occurs due to an unexpected interaction that causes an ASSERT failure.

Recommendations: For iCloud for Windows versions prior to 7.7, update to version 7.7 or later. For watchOS versions prior to 5, update to version 5 or later. For Safari versions prior to 12, update to version 12 or later. For iOS versions prior to 12, update to version 12 or later. For iTunes for Windows versions prior to 12.9, update to version 12.9 or later. For tvOS versions prior to 12, update to version 12 or later.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2018-4474

Produtos afetados

Safari

Icloud For Windows

Ios

Itunes

Itunes For Windows

Tvos

Watchos

Referências · 8

• https://osv.dev/vulnerability/CVE-2018-4474 · Aviso do Fabricante
• https://support.apple.com/en-us/HT209140 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-4474 · Nota de Segurança
• https://support.apple.com/en-us/HT209141 · Aviso do Fabricante
• https://support.apple.com/en-us/HT209106 · Aviso do Fabricante
• https://support.apple.com/en-us/HT209109 · Aviso do Fabricante
• https://support.apple.com/en-us/HT209108 · Aviso do Fabricante
• https://support.apple.com/en-us/HT209107 · Aviso do Fabricante