PT-2019-18042 · Apple · Icloud For Windows

Stefan Kanthak · Publicado 2019-12-18 · Atualizado 2019-12-21 · CVE-2019-6236

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iCloud for Windows versions prior to 7.11

Description A race condition existed during the installation of iCloud for Windows, which could result in arbitrary code execution if the iCloud installer is run in an untrusted directory. This issue was addressed with improved state handling.

Recommendations For versions prior to 7.11, update to version 7.11 to resolve the issue. As a temporary workaround, consider avoiding the installation of iCloud for Windows in untrusted directories until the update is applied.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2019-6236

Produtos afetados

Icloud For Windows

Referências · 3

• https://support.apple.com/HT209605 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6236 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6236 · Aviso do Fabricante