PT-2019-18040 · Apple · Itunes For Windows+1

Stefan Kanthak · Publicado 2019-12-18 · Atualizado 2019-12-21 · CVE-2019-6232

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iCloud for Windows versions prior to 7.11

Description A race condition existed during the installation of iTunes for Windows, which could result in arbitrary code execution if the iTunes installer is run in an untrusted directory. This issue was addressed with improved state handling.

Recommendations For versions prior to 7.11, update to iCloud for Windows version 7.11 to resolve the issue. As a temporary workaround, consider avoiding the installation of iTunes in untrusted directories until the update is applied.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2019-6232

Produtos afetados

Icloud For Windows

Itunes For Windows

Referências · 3

• https://support.apple.com/HT209605 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6232 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6232 · Nota de Segurança